CVE-2024-44867

phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php...

CVE-2024-44867: Improper Limitation of a Pathname to a Restricted Directory

phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php...

CVE-2024-44867

phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php...

phpok 安全漏洞

phpok is an extension-enabled enterprise website builder from the phpok team. A security vulnerability exists in phpok v3.0, which originates from an arbitrary file read vulnerability via component /autoload/file.php...

PT-2024-31288

Name of the Vulnerable Software and Affected Versions phpok version 3.0 Description The issue is an arbitrary file read vulnerability via the component /autoload/file.php. This allows a local attacker to access sensitive files. There is no information provided about the estimated number of...

CVE-2024-44867

The enterprise website builder phpok v3.0 contains an arbitrary file read vulnerability located in the /autoload/file.php component. This vulnerability allows for the unauthorized reading of files on the server. While specific exploit links or remediation steps are not provided in the documents, ...

CVE-2024-44867

phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php...

CVE-2024-38953

phpok 6.4.003 contains a Cross Site Scripting XSS vulnerability in the okf method under the framework/api/uploadcontrol.php file...

PHPOK Security Vulnerability

PHPOK is an enterprise website builder system that supports extensions. A security vulnerability exists in PHPOK version 6.4.003, which originates from the presence of a cross-site scripting XSS vulnerability...

CVE-2024-38953: Improper Neutralization of Input During Web Page Generation

phpok 6.4.003 contains a Cross Site Scripting XSS vulnerability in the okf method under the framework/api/uploadcontrol.php file...

CVE-2024-38953

The CVE-2024-38953 entry maps to phpok 6.4.003 with a Cross Site Scripting (XSS) vulnerability in the ok_f() method of framework/api/upload_control.php. Affected component: phpok core, file path framework/api/upload_control.php. Root cause and explicit impact are described as XSS, but the connect...

CVE-2024-38953

phpok 6.4.003 contains a Cross Site Scripting XSS vulnerability in the okf method under the framework/api/uploadcontrol.php file...

PT-2024-28292 · Phpok · Phpok

Name of the Vulnerable Software and Affected Versions: phpok version 6.4.003 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It affects the ok f method located in the framework/api/upload control.php file. Recommendations: For phpok version 6.4.003, consider disabli...

CVE-2024-38953

phpok 6.4.003 contains a Cross Site Scripting XSS vulnerability in the okf method under the framework/api/uploadcontrol.php file...

CVE-2024-38953

phpok 6.4.003 contains a Cross Site Scripting XSS vulnerability in the okf method under the framework/api/uploadcontrol.php file...

CVE-2023-29881

phpok 6.4.003 is vulnerable to SQL injection in the function indexf in phpok64/framework/api/callcontrol.php...

PHPOK 安全漏洞

PHPOK is an enterprise website builder system that supports extensions. A security vulnerability exists in PHPOK version 6.4.003, which stems from vulnerability to SQL injection attacks...

CVE-2023-29881: Improper Neutralization of Special Elements used in an SQL Command

phpok 6.4.003 is vulnerable to SQL injection in the function indexf in phpok64/framework/api/callcontrol.php...

CVE-2023-29881

phpok 6.4.003 is vulnerable to SQL injection in the function indexf in phpok64/framework/api/callcontrol.php...

CVE-2023-29881

The enterprise website builder system PHPOK version 6.4.003 is vulnerable to a SQL injection vulnerability. The root cause is located in the index_f() function within the file phpok64/framework/api/call_control.php . This vulnerability allows for the potential exploitation of the underlying SQL d...