CVE-2020-21486

2023-06-2000:00:00

mitre

www.cve.org

phpok

v5.4

sql injection

remote attacker

sensitive information

userlist function

framework

phpok_call.php file

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.8%

JSON

SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist function in framerwork/phpok_call.php file.

References

github.com/qinggan/phpok/issues/8