Lucene search
+L

5 matches found

CVE
CVE
•added 2024/07/01 12:00 a.m.•95 views

CVE-2024-38953

The CVE-2024-38953 entry maps to phpok 6.4.003 with a Cross Site Scripting (XSS) vulnerability in the ok_f() method of framework/api/upload_control.php. Affected component: phpok core, file path framework/api/upload_control.php. Root cause and explicit impact are described as XSS, but the connect...

6.1CVSS5.9AI score0.00292EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/01 12:00 a.m.•2 views

CVE-2024-38953: Improper Neutralization of Input During Web Page Generation

phpok 6.4.003 contains a Cross Site Scripting XSS vulnerability in the okf method under the framework/api/uploadcontrol.php file...

6.1CVSS5.8AI score0.00292EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/07/01 12:00 a.m.•14 views

CVE-2024-38953

phpok 6.4.003 contains a Cross Site Scripting XSS vulnerability in the okf method under the framework/api/uploadcontrol.php file...

5.9AI score0.00292EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/07/01 12:00 a.m.•48 views

CVE-2024-38953

phpok 6.4.003 contains a Cross Site Scripting XSS vulnerability in the okf method under the framework/api/uploadcontrol.php file...

0.00292EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/30 12:00 a.m.•5 views

CVE-2018-16142: Improper Neutralization of Input During Web Page Generation

PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/logincontrol.php via the back parameter to the okf function...

6.1CVSS6.3AI score0.00692EPSS
SaveExploits1References2
Rows per page
Query Builder