Deserialization of untrusted data

2022-05-1218:16:00

PRIOn knowledge base

www.prio-n.com

phpok v6.1

deserialization vulnerability

login_control.php

attackers

arbitrary files

nvd

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

53.2%

JSON

Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function in login_control.php. This vulnerability allows attackers to getshell via writing arbitrary files.

References

github.com/qinggan/phpok/issues/12