Lucene search
+L

10 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-33702

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01315EPSS
SaveExploits1References1
NVD
NVD
•added 2022/05/12 6:16 p.m.•47 views

CVE-2022-29363

Phpok v6.1 was discovered to contain a deserialization vulnerability via the updatef function in logincontrol.php. This vulnerability allows attackers to getshell via writing arbitrary files...

9.8CVSS0.01315EPSS
SaveExploits1References1
Prion
Prion
•added 2022/05/12 6:16 p.m.•26 views

Deserialization of untrusted data

Phpok v6.1 was discovered to contain a deserialization vulnerability via the updatef function in logincontrol.php. This vulnerability allows attackers to getshell via writing arbitrary files...

7.5CVSS9.4AI score0.01315EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/05/12 5:15 p.m.•4 views

CVE-2022-29363

Phpok v6.1 was discovered to contain a deserialization vulnerability via the updatef function in logincontrol.php. This vulnerability allows attackers to getshell via writing arbitrary files...

9.8CVSS0.01315EPSS
SaveExploits1References1
CVE
CVE
•added 2022/05/12 5:15 p.m.•103 views

CVE-2022-29363

CVE-2022-29363 affects Phpok v6.1, where a deserialization vulnerability in login_control.php:update_f() allows an attacker to write arbitrary files, enabling shell access (getshell). The issue is documented with high/critical impact (C/P/I/A = high/partial/high/partial; CVSS 3.1 base score 9.8)....

9.8CVSS9.4AI score0.01315EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/12 12:00 a.m.•7 views

CVE-2022-29363: Deserialization of Untrusted Data

Phpok v6.1 was discovered to contain a deserialization vulnerability via the updatef function in logincontrol.php. This vulnerability allows attackers to getshell via writing arbitrary files...

9.8CVSS8.2AI score0.01315EPSS
SaveExploits1References2
NVD
NVD
•added 2018/08/30 5:29 a.m.•27 views

CVE-2018-16142

PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/logincontrol.php via the back parameter to the okf function...

6.1CVSS6AI score0.00692EPSS
SaveExploits1References1
CVE
CVE
•added 2018/08/30 5:00 a.m.•72 views

CVE-2018-16142

CVE-2018-16142 concerns PHPOK 4.8.278, where a reflected XSS vulnerability exists in framework/www/login_control.php via the _back parameter to the ok_f function. The connected sources (NVD/CNVD/CVELIST) confirm the vulnerability type as cross-site scripting and specify the affected component and...

6.1CVSS5.9AI score0.00692EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2018/08/30 5:00 a.m.•38 views

CVE-2018-16142

PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/logincontrol.php via the back parameter to the okf function...

6AI score0.00692EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/30 12:00 a.m.•8 views

CVE-2018-16142: Improper Neutralization of Input During Web Page Generation

PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/logincontrol.php via the back parameter to the okf function...

6.1CVSS6.3AI score0.00692EPSS
SaveExploits1References2
Rows per page
Query Builder