CVE-2020-19199

A Cross Site Request Forgery CSRF vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitrary code...

CVE-2020-19199

PHPOK 5.2.060 is affected by a CSRF vulnerability in admin.php?c=admin&f=save that could let a remote attacker execute arbitrary code. Affected component is PHPOK’s admin save endpoint; root cause is a CSRF flaw enabling code execution. Multiple sources (NVD entry CVE-2020-19199 and partner discl...

CVE-2020-19199: Cross-Site Request Forgery (CSRF)

A Cross Site Request Forgery CSRF vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitrary code...

PHPOK 跨站请求伪造漏洞

phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. A cross-site request forgery vulnerability exists in PHPOK version 5.2.060. An attacker can exploit this vulnerability by executing arbitrary code via admin.php?c=admin&f=save...

PHPOK suffers from a command execution vulnerability (CNVD-2021-35553)

PHPOK is a website building content management system to achieve customized open source free website building cms system. PHPOK has a command execution vulnerability that can be exploited by attackers to execute commands...

PHPOK suffers from SQL injection vulnerability

PHPOK is a set of enterprise website system developed in PHP + MYSQL language. PHPOK suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

File upload vulnerability in PHPOK backend

PHPOK is a set of enterprise website system developed in PHP + MYSQL language. A file upload vulnerability exists in the PHPOK backend. An attacker can exploit the vulnerability to upload webshell and gain server privileges...

PhpOK SQL Injection Vulnerability

phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. PhpOK 5.4.137 suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability by injecting attachment data via SQL and then calling the attachment...

CVE-2020-16629

PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the target path...

CVE-2020-16629

PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the target path...

Sql injection

PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the target path...

CVE-2020-16629

CVE-2020-16629 affects PhpOK 5.4.137. A SQL injection vulnerability lets an attacker inject attachment data via SQL and then call the attachment replacement function via api.php to write a PHP file to a target path. The issue is documented across multiple sources (CNVD, NVD, Red Hat, CVE lists) w...

CVE-2020-16629

PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the target path...

CVE-2020-16629: Improper Neutralization of Special Elements used in an SQL Command

PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the target path...

PHPOK SQL注入漏洞

phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. PhpOK 5.4.137 suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability by injecting attachment data via SQL and then calling the attachment...

Command Execution Vulnerability in phpok

PHPOK is a website building content management system to achieve customized open source free website building cms system. phpok there is a command execution vulnerability , an attacker can exploit the vulnerability to execute arbitrary commands...

Stored Cross-site Scripting Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co.

PHPOK system is a content management system for website construction developed by Shenzhen 锟铻科技有限公司formerly known as PHPOK Studio. A stored cross-site scripting vulnerability exists in PHPOK. The vulnerability can be exploited to obtain sensitive information such as administrator cookies...

File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co., Ltd (CNVD-2020-47296)

PHPOK is a content management system for website construction developed by Shenzhen KunHei Technology Co. A file upload vulnerability exists in PHPOK, which can be exploited by attackers to gain control of the web server...

PHPOK 5.5 suffers from a command execution vulnerability (CNVD-2020-47655)

PHPOK is a content management system for website construction developed by Shenzhen KunHei Technology Co. A command execution vulnerability exists in PHPOK 5.5, which can be exploited by attackers to gain server privileges...

Code execution vulnerability in PHPOK 5.5 (CNVD-2020-45155)

PHPOK is a content management system for website construction developed by Shenzhen KunHei Technology Co. A code execution vulnerability exists in PHPOK 5.5, which can be exploited by attackers to gain server privileges...