GHSA-m4f2-xpfq-h97v (CVE-2025-67164)

Details

An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file.

The project is archived as of December 1, 2023.

Affected Packages

pagekit/pagekit

Packagist

References

ADVISORYhttps://github.com/advisories/GHSA-m4f2-xpfq-h97v WEBhttps://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67164 PACKAGEhttps://github.com/pagekit/pagekit ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-67164

GHSA-m4f2-xpfq-h97v

Details

Affected Packages

References

Aliases

CVSS Analysis

Related

Ecosystems

Timeline