CVE-2022-47129

PHPOK v6.3 was discovered to contain a remote code execution RCE vulnerability...

PHPOK 代码问题漏洞

PHPOK is an enterprise building system that supports expansion. PHPOK 5.7.140 version of the code problem vulnerability, the vulnerability stems from the existence of a file upload vulnerability, a remote attacker can use this vulnerability through the upload of the produced zip file to run...

SQL injection vulnerability in PHPOK enterprise website builder system background or***_co***.php file

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A SQL injection vulnerability exists in the orco.php file in the background of the PHPOK enterprise website system. Remote attackers can use this vulnerability to obtain sensitive information in the database...

File upload vulnerability in background mo***_co***.php file of PHPOK enterprise website building system

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A file upload vulnerability exists in the background moco.php file of PHPOK enterprise website system. Remote attackers can use this vulnerability to obtain server administrative privileges...

PHPOK Cross-Site Scripting Vulnerability

PHPOK is an enterprise building system that supports expansion. A cross-site scripting vulnerability exists in the framework/www/logincontrol.php file in PHPOK version 4.8.278. A remote attacker can exploit this vulnerability by injecting arbitrary web script or HTML e.g., changing cookies with t...

phppok framework\inp_control.php SQL注入

漏洞文件： framework\inpcontrol.php文件代码：function indexf $type = $this-get"type"; $content = $this-get"content"; if$type == "title" && $content $this-gettitlelist$content; elseif$type == "user" && $content fon...