p a c k e t s t o r m s e c u r i t y .com/files/125836/KCFinder-2.53-Shell-Upload.html

Цитата:


KCFinder versions 2.51 through 2.53 suffers from a remote shell upload vulnerability.



w w w . e x p l o i t - d b .com/exploits/27597/

Цитата:


KCFinder 2.51 - Local File Disclosure



etc...

Гугли, в поисковике все есть.