CVE-2023-2888

PHPOK 6.4.100 is affected by an unrestricted arbitrary file upload vulnerability in admin.php?c=upload&f=zip&_noCache=... remote; impact includes potential code execution via uploaded files. No patch/version fix details are provided in the connected documents; remediation status is unspecified. I...

CVE-2023-2888 PHPOK unrestricted upload

A vulnerability, which was classified as problematic, was found in PHPOK 6.4.100. This affects an unknown part of the file /admin.php?c=upload&f=zip&noCache=0.1683794968. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-229953 was...

PHPOK 代码问题漏洞

PHPOK is an enterprise building system that supports expansion. PHPOK version 6.4.100 suffers from an arbitrary file upload vulnerability, which stems from admin.php?c=upload&f=zip&noCache=0.1683794968 lack of valid validation of the uploaded file. An attacker can exploit this vulnerability to...

PHPOK Code Problem Vulnerability

PHPOK is an enterprise building system that supports expansion. PHPOK 5.7.140 version of the code problem vulnerability, the vulnerability stems from the existence of a file upload vulnerability, a remote attacker can use this vulnerability through the upload of the produced zip file to run...

PT-2023-22028 · Phpok · Phpok

Name of the Vulnerable Software and Affected Versions: PHPOK version 6.4.100 Description: A problematic issue was found in PHPOK, affecting an unknown part of the file "/admin.php?c=upload&f=zip& noCache=0.1683794968". This issue leads to unrestricted upload and can be initiated remotely...

CVE-2022-47129

PHPOK v6.3 was discovered to contain a remote code execution RCE vulnerability...

Remote code execution

PHPOK v6.3 was discovered to contain a remote code execution RCE vulnerability...

CVE-2021-34076

File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file upload...

CVE-2021-34076

File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file upload...

Unrestricted file upload

File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file upload...

CVE-2022-47129

PHPOK v6.3 was discovered to contain a remote code execution RCE vulnerability...

CVE-2021-34076

CVE-2021-34076 affects PHPOK 5.7.140. A file-upload vulnerability in PHPOK allows remote attackers to upload crafted ZIP files that execute arbitrary code with elevated privileges, as indicated by NVD metrics (CVSS v3.1: 8.8, Network, High impact to Confidentiality/Integrity/Availability). Connec...

CVE-2022-47129

PHPOK v6.3 is identified as affected by a remote code execution (RCE) vulnerability. The provided sources confirm an RCE impact but do not include concrete technical details about the root cause, vectors, or a verified fix. CVSS data from the initial entry indicates a high-severity, network-based...

CVE-2021-34076

File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file upload...

PHPOK 安全漏洞

PHPOK is an enterprise website builder with extended support. A security vulnerability exists in PHPOK v6.3 that stems from the presence of a Remote Code Execution RCE vulnerability...

PT-2023-12241 · Phpok · Phpok

Name of the Vulnerable Software and Affected Versions: PHPOK version 5.7.140 Description: The issue allows remote attackers to run arbitrary code and gain escalated privileges via a crafted zip file upload. Recommendations: For PHPOK version 5.7.140, consider disabling file upload functionality...

CVE-2021-34076

File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file upload...

CVE-2022-47129

PHPOK v6.3 was discovered to contain a remote code execution RCE vulnerability...

CVE-2022-40889

Phpok 6.1 has a deserialization vulnerability via framework/phpokcall.php...

CVE-2022-40889

Phpok 6.1 has a deserialization vulnerability via framework/phpokcall.php...