281 matches found
CVE-2022-47129
PHPOK v6.3 was discovered to contain a remote code execution RCE vulnerability...
CVE-2022-47129: Improper Control of Generation of Code
PHPOK v6.3 was discovered to contain a remote code execution RCE vulnerability...
CVE-2021-34076: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file upload...
CVE-2022-47129
PHPOK v6.3 was discovered to contain a remote code execution RCE vulnerability...
CVE-2021-34076
File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file upload...
CVE-2022-47129
PHPOK v6.3 is identified as affected by a remote code execution (RCE) vulnerability. The provided sources confirm an RCE impact but do not include concrete technical details about the root cause, vectors, or a verified fix. CVSS data from the initial entry indicates a high-severity, network-based...
CVE-2021-34076
CVE-2021-34076 affects PHPOK 5.7.140. A file-upload vulnerability in PHPOK allows remote attackers to upload crafted ZIP files that execute arbitrary code with elevated privileges, as indicated by NVD metrics (CVSS v3.1: 8.8, Network, High impact to Confidentiality/Integrity/Availability). Connec...
CVE-2022-40889
Phpok 6.1 has a deserialization vulnerability via framework/phpokcall.php...
CVE-2022-40889
Phpok 6.1 has a deserialization vulnerability via framework/phpokcall.php...
Deserialization of untrusted data
Phpok 6.1 has a deserialization vulnerability via framework/phpokcall.php...
CVE-2022-40889
Phpok 6.1 has a deserialization vulnerability via framework/phpokcall.php...
CVE-2022-40889
Phpok 6.1 has a deserialization vulnerability via framework/phpokcall.php...
CVE-2022-40889
CVE-2022-40889 : Phpok 6.1 has a deserialization vulnerability via framework/phpok_call.php. Affected: Phpok 6.1 (framework/phpok_call.php). Root cause: deserialization vulnerability in the PHP code path. Impact: high confidentiality, integrity, and availability impacts per CVSS 3.1 score (9.8, C...
PHPOK 代码问题漏洞
PHPOK is an enterprise website builder with extension support. A security vulnerability exists in PHPOK version 6.1, which stems from a deserialization vulnerability found via framework/Phpokcall.php...
PT-2022-25610 · Phpok · Phpok
Name of the Vulnerable Software and Affected Versions: Phpok version 6.1 Description: The issue is related to a deserialization vulnerability. It affects the framework/phpok call.php file. Recommendations: For Phpok version 6.1, consider restricting access to the framework/phpok call.php file unt...
CVE-2022-40889: Deserialization of Untrusted Data
Phpok 6.1 has a deserialization vulnerability via framework/phpokcall.php...
CVE-2022-29363
Phpok v6.1 was discovered to contain a deserialization vulnerability via the updatef function in logincontrol.php. This vulnerability allows attackers to getshell via writing arbitrary files...
CVE-2022-29363
Phpok v6.1 was discovered to contain a deserialization vulnerability via the updatef function in logincontrol.php. This vulnerability allows attackers to getshell via writing arbitrary files...
CVE-2022-29363
Phpok v6.1 was discovered to contain a deserialization vulnerability via the updatef function in logincontrol.php. This vulnerability allows attackers to getshell via writing arbitrary files...
Deserialization of untrusted data
Phpok v6.1 was discovered to contain a deserialization vulnerability via the updatef function in logincontrol.php. This vulnerability allows attackers to getshell via writing arbitrary files...