281 matches found
CVE-2023-33601: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP file...
PHPOK Arbitrary File Upload Vulnerability (CNVD-2023-43865)
PHPOK is an enterprise building system that supports expansion. PHPOK version 6.4.100 suffers from an arbitrary file upload vulnerability, which stems from admin.php?c=upload&f=zip&noCache=0.1683794968 lack of valid validation of the uploaded file. An attacker can exploit this vulnerability to...
CVE-2023-2888
A vulnerability, which was classified as problematic, was found in PHPOK 6.4.100. This affects an unknown part of the file /admin.php?c=upload&f=zip&noCache=0.1683794968. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-229953 was...
Design/Logic Flaw
A vulnerability, which was classified as problematic, was found in PHPOK 6.4.100. This affects an unknown part of the file /admin.php?c=upload&f=zip&noCache=0.1683794968. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-229953 was...
CVE-2023-2888 PHPOK unrestricted upload
A vulnerability, which was classified as problematic, was found in PHPOK 6.4.100. This affects an unknown part of the file /admin.php?c=upload&f=zip&noCache=0.1683794968. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-229953 was...
CVE-2023-2888 PHPOK unrestricted upload
A vulnerability, which was classified as problematic, was found in PHPOK 6.4.100. This affects an unknown part of the file /admin.php?c=upload&f=zip&noCache=0.1683794968. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-229953 was...
CVE-2023-2888 PHPOK unrestricted upload
A vulnerability, which was classified as problematic, was found in PHPOK 6.4.100. This affects an unknown part of the file /admin.php?c=upload&f=zip&noCache=0.1683794968. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-229953 was...
CVE-2023-2888
PHPOK 6.4.100 is affected by an unrestricted arbitrary file upload vulnerability in admin.php?c=upload&f=zip&_noCache=... remote; impact includes potential code execution via uploaded files. No patch/version fix details are provided in the connected documents; remediation status is unspecified. I...
PHPOK Code Problem Vulnerability
PHPOK is an enterprise building system that supports expansion. PHPOK 5.7.140 version of the code problem vulnerability, the vulnerability stems from the existence of a file upload vulnerability, a remote attacker can use this vulnerability through the upload of the produced zip file to run...
PT-2023-22028 · Phpok · Phpok
Name of the Vulnerable Software and Affected Versions: PHPOK version 6.4.100 Description: A problematic issue was found in PHPOK, affecting an unknown part of the file "/admin.php?c=upload&f=zip& noCache=0.1683794968". This issue leads to unrestricted upload and can be initiated remotely...
CVE-2023-2888: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as problematic, was found in PHPOK 6.4.100. This affects an unknown part of the file /admin.php?c=upload&f=zip&noCache=0.1683794968. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-229953 was...
PHPOK 代码问题漏洞
PHPOK is an enterprise building system that supports expansion. PHPOK version 6.4.100 suffers from an arbitrary file upload vulnerability, which stems from admin.php?c=upload&f=zip&noCache=0.1683794968 lack of valid validation of the uploaded file. An attacker can exploit this vulnerability to...
CVE-2022-47129
PHPOK v6.3 was discovered to contain a remote code execution RCE vulnerability...
Remote code execution
PHPOK v6.3 was discovered to contain a remote code execution RCE vulnerability...
CVE-2021-34076
File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file upload...
CVE-2021-34076
File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file upload...
Unrestricted file upload
File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file upload...
CVE-2021-34076
File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file upload...
PT-2023-12241 · Phpok · Phpok
Name of the Vulnerable Software and Affected Versions: PHPOK version 5.7.140 Description: The issue allows remote attackers to run arbitrary code and gain escalated privileges via a crafted zip file upload. Recommendations: For PHPOK version 5.7.140, consider disabling file upload functionality...