CVE-2023-29881

phpok 6.4.003 is vulnerable to SQL injection in the function indexf in phpok64/framework/api/callcontrol.php...

CVE-2023-29881

phpok 6.4.003 is vulnerable to SQL injection in the function indexf in phpok64/framework/api/callcontrol.php...

PT-2024-12219 · Phpok · Phpok

Name of the Vulnerable Software and Affected Versions: phpok version 6.4.003 Description: The issue concerns SQL injection in the index f function located in phpok64/framework/api/call control.php. This allows for potential exploitation of the SQL injection vulnerability. Recommendations: For php...

PHPOK SQL Injection Vulnerability (CNVD-2023-64116)

PHPOK is an enterprise building system that supports expansion. PHPOK v.5.4 suffers from a SQL injection vulnerability that originates from allowing remote attackers to obtain sensitive information via the userlist function in the framerwork/phpokcall.php file. No detailed vulnerability details a...

CVE-2020-21486

SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the userlist function in framerwork/phpokcall.php file...

CVE-2020-21486

SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the userlist function in framerwork/phpokcall.php file...

Sql injection

SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the userlist function in framerwork/phpokcall.php file...

CVE-2020-21486

CVE-2020-21486 affects PHPOK v5.4. A SQL injection in the vulnerable function _userlist (framerwork/phpok_call.php) can allow a remote attacker to obtain sensitive information. Multiple connected sources corroborate the vulnerability and its impact as information disclosure via SQL injection. Exp...

CVE-2020-21486

SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the userlist function in framerwork/phpokcall.php file...

CVE-2020-21486: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the userlist function in framerwork/phpokcall.php file...

PT-2023-11590 · Phpok · Phpok

Name of the Vulnerable Software and Affected Versions: PHPOK version 5.4 Description: The issue allows a remote attacker to obtain sensitive information via the userlist function in the framerwork/phpok call.php file. This is achieved through a SQL injection vulnerability. Recommendations: For...

PHPOK SQL注入漏洞

PHPOK is an enterprise building system that supports expansion. PHPOK v.5.4 suffers from a SQL injection vulnerability that originates from allowing remote attackers to obtain sensitive information via the userlist function in the framerwork/phpokcall.php file. No detailed vulnerability details a...

CVE-2020-21486

SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the userlist function in framerwork/phpokcall.php file...

CVE-2023-33601

An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2023-33601

An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2023-33601

An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2023-33601

An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP file...

PHPOK 代码问题漏洞

PHPOK is an enterprise website building system with extended support. A security vulnerability exists in PHPOK version 6.4.100, which originates from an arbitrary file upload vulnerability. The vulnerability can be exploited by an attacker to execute arbitrary code by uploading a specially crafte...

PT-2023-24402 · Phpok · Phpok

Name of the Vulnerable Software and Affected Versions: phpok version 6.4.100 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the "/admin.php?c=upload" API endpoint, specifically the c parameter set to...

CVE-2023-33601

CVE-2023-33601 describes an arbitrary file upload vulnerability in the PHPok web application (version 6.4.100). The flaw resides in the /admin.php?c=upload endpoint, allowing an attacker to upload a crafted PHP file to achieve arbitrary code execution. The provided connected documents confirm the...