phpKF CMS Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in phpKF CMS version 3.00 Beta y6. This vulnerability allows unauthenticated attackers to upload files and execute arbitrary code by bypassing file extension checks. Attackers can upload a PHP file disguised as a PNG, rename it, and execute system commands through a crafted web shell parameter.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where phpKF CMS is hosted.

Reproduction

The vulnerability can be reproduced by uploading a PHP file disguised as a PNG file through the application's file upload mechanism, which fails to properly validate file extensions. After uploading the file, it can be renamed and executed via a web shell parameter.