CVE-2020-18440: Buffer Copy without Checking Size of Input

Buffer overflow vulnerability in framework/init.php in qinggan phpok 5.1, allows attackers to execute arbitrary code...

CVE-2020-18438: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the title parameter to admin.php...

qinggan phpok 代码问题漏洞

phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. An arbitrary file write vulnerability exists in the editsavef function in framework/admin/tplcontrol.php in phpok version 5.1. An attacker can exploit this vulnerability to wri...

Logic flaw vulnerability in PHPOK of Shenzhen Kunshuo Technology Co. Ltd (CNVD-2021-51497)

PHPOK is a set of popular enterprise website construction system written in PHP language and MySQL database. Ltd. PHPOK has a logic flaw vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co., Ltd (CNVD-2021-51871)

PHPOK is a website building content management system to achieve customized open source free website building cms system. Ltd. PHPOK file upload vulnerability, attackers can use the vulnerability to upload webshell, to obtain server privileges...

File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co., Ltd (CNVD-2021-51870)

PHPOK is a website building content management system to achieve customized open source free website building cms system. Ltd. PHPOK file upload vulnerability, attackers can use the vulnerability to upload webshell, to obtain server privileges...

File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co., Ltd (CNVD-2021-51869)

PHPOK is a website building content management system to achieve customized open source free website building cms system. Ltd. PHPOK file upload vulnerability, attackers can use the vulnerability to upload webshell, to obtain server privileges...

File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co., Ltd (CNVD-2021-51872)

PHPOK is a website building content management system to achieve customized open source free website building cms system. Ltd. PHPOK file upload vulnerability, attackers can use the vulnerability to upload webshell, to obtain server privileges...

PHPOK suffers from a file upload vulnerability (CNVD-2021-46925)

PHPOK is a website building content management system to achieve customized open source free website building cms system. PHPOK has a file upload vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co., Ltd (CNVD-2021-39278)

PHPOK is a website building content management system to achieve customized open source free website building cms system. PHPOK has a file upload vulnerability that can be exploited by attackers to execute arbitrary commands...

File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co.

PHPOK is a website building content management system to achieve customized open source free website building cms system. Ltd. PHPOK file upload vulnerability, attackers can use the vulnerability to obtain server privileges...

PHPOK Cross-Site Request Forgery Vulnerability

phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. A cross-site request forgery vulnerability exists in PHPOK version 5.2.060. An attacker can exploit this vulnerability by executing arbitrary code via admin.php?c=admin&f=save...

CVE-2020-19199

A Cross Site Request Forgery CSRF vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitrary code...

CVE-2020-19199

A Cross Site Request Forgery CSRF vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitrary code...

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitrary code...

CVE-2020-19199

A Cross Site Request Forgery CSRF vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitrary code...

CVE-2020-19199

PHPOK 5.2.060 is affected by a CSRF vulnerability in admin.php?c=admin&f=save that could let a remote attacker execute arbitrary code. Affected component is PHPOK’s admin save endpoint; root cause is a CSRF flaw enabling code execution. Multiple sources (NVD entry CVE-2020-19199 and partner discl...

PT-2021-10304

Name of the Vulnerable Software and Affected Versions: PHPOK version 5.2.060 Description: A Cross Site Request Forgery CSRF issue exists, which could allow a remote malicious user to execute arbitrary code via the "admin.php?c=admin&f=save" API endpoint, specifically through the c and f parameter...

PHPOK 跨站请求伪造漏洞

phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. A cross-site request forgery vulnerability exists in PHPOK version 5.2.060. An attacker can exploit this vulnerability by executing arbitrary code via admin.php?c=admin&f=save...

CVE-2020-19199: Cross-Site Request Forgery (CSRF)

A Cross Site Request Forgery CSRF vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitrary code...