CVE-2020-21486

SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the userlist function in framerwork/phpokcall.php file...

CVE-2020-21486

CVE-2020-21486 affects PHPOK v5.4. A SQL injection in the vulnerable function _userlist (framerwork/phpok_call.php) can allow a remote attacker to obtain sensitive information. Multiple connected sources corroborate the vulnerability and its impact as information disclosure via SQL injection. Exp...