Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24

Export CSV
CVE-2018-19562

An issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to execute arbitrary code via a "Login Background > Program Upgrade > Compressed Packet Upgrade" action in which a .php file is inside a ZIP archive.

CVSS 3.0 · 8.8 High EPSS 2.2% KEV · Not listed
Vendors
Phpok
Products
Phpok
CVE-2018-16142

PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/login_control.php via the _back parameter to the ok_f function.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Phpok
Products
Phpok
CVE-2018-12492

PHPOK 4.9.032 has an arbitrary file deletion vulnerability in the delfile_f function in framework/admin/tpl_control.php.

CVSS 3.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Phpok
Products
Phpok
CVE-2018-12491

PHPOK 4.9.032 has an arbitrary file upload vulnerability in the import_f function in framework/admin/modulec_control.php, as demonstrated by uploading a .php file within a .php.zip archive, a similar issue to CVE-2018-8944.

CVSS 3.0 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Phpok
Products
Phpok