İçeriğe atla
Noroxi

phpok kayıtları

phpok üreticisine ait 23 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 21
  4. 22
  5. 23
  6. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

23 kayıt
  • CVE-2020-18440
    39İzleyin

    Buffer overflow vulnerability in framework/init.php in qinggan phpok 5.1, allows attackers to execute arbitrary code.

    KritikCVSS 9,8İstismar yokEPSS %2

    phpok · phpok2 Kas 2021

  • CVE-2018-12491
    39İzleyin

    PHPOK 4.9.032 has an arbitrary file upload vulnerability in the import_f function in framework/admin/modulec_control.php, as demonstrated by

    KritikCVSS 9,8İstismar yokEPSS %2

    phpok · phpok15 Haz 2018

  • CVE-2020-16629
    39İzleyin

    PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacemen

    KritikCVSS 9,8İstismar yokEPSS %1

    phpok · phpok8 Şub 2021

  • CVE-2022-29363
    39İzleyin

    Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function in login_control.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    phpok · phpok12 May 2022

  • CVE-2022-47129
    39İzleyin

    PHPOK v6.3 was discovered to contain a remote code execution (RCE) vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %1

    phpok · phpok11 May 2023

  • CVE-2018-8944
    39İzleyin

    PHPOK 4.8.338 has an arbitrary file upload vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %1

    phpok · phpok22 Mar 2018

  • CVE-2022-40889
    39İzleyin

    Phpok 6.1 has a deserialization vulnerability via framework/phpok_call.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    phpok · phpok18 Eki 2022

  • CVE-2019-16131
    37İzleyin

    framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can

    YüksekCVSS 8,8İstismar yokEPSS %7

    phpok · oklite8 Eyl 2019

  • CVE-2018-19562
    36İzleyin

    An issue was discovered in PHPok 4.9.015.

    YüksekCVSS 8,8İstismar yokEPSS %2

    phpok · phpok26 Kas 2018

  • CVE-2020-18439
    36İzleyin

    An issue was discoverered in in function edit_save_f in framework/admin/tpl_control.php in qinggan phpok 5.1, allows attackers to write arbi

    KritikCVSS 9,1İstismar yokEPSS %1

    phpok · phpok2 Kas 2021

  • CVE-2023-33601
    35İzleyin

    An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP

    YüksekCVSS 8,8İstismar yokEPSS %1

    phpok · phpok6 Haz 2023

  • CVE-2020-19199
    35İzleyin

    A Cross Site Request Forgery (CSRF) vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious u

    YüksekCVSS 8,8İstismar yokEPSS %1

    phpok · phpok10 May 2021

  • CVE-2021-34076
    35İzleyin

    File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file

    YüksekCVSS 8,8İstismar yokEPSS %1

    phpok · phpok11 May 2023

  • CVE-2023-2888
    35İzleyin

    PHPOK unrestricted upload

    YüksekCVSS 8,8İstismar yokEPSS %1

    phpok · phpok25 May 2023

  • CVE-2020-18438
    30İzleyin

    Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the title parameter to admin

    YüksekCVSS 7,5İstismar yokEPSS %2

    phpok · phpok2 Kas 2021

  • CVE-2024-44867
    30İzleyin

    phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php.

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    phpok · phpok10 Eyl 2024

  • CVE-2018-12492
    30İzleyin

    PHPOK 4.9.032 has an arbitrary file deletion vulnerability in the delfile_f function in framework/admin/tpl_control.php.

    YüksekCVSS 7,5İstismar yokEPSS %1

    phpok · phpok15 Haz 2018

  • CVE-2020-21486
    30İzleyin

    SQL injection vulnerability in PHPOK v.5.4.

    YüksekCVSS 7,5İstismar yokEPSS %1

    phpok · phpok20 Haz 2023

  • CVE-2019-16132
    28İzleyin

    An issue was discovered in OKLite v1.2.25.

    OrtaCVSS 6,5İstismar yokEPSS %6

    phpok · oklite8 Eyl 2019

  • CVE-2023-29881
    26İzleyin

    phpok 6.4.003 is vulnerable to SQL injection in the function index_f() in phpok64/framework/api/call_control.php.

    OrtaCVSS 6,5İstismar yokEPSS %0

    phpok · phpok14 May 2024

  • CVE-2018-16142
    24İzleyin

    PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/login_control.php via the _back parameter to the ok_f function.

    OrtaCVSS 6,1İstismar yokEPSS %1

    phpok · phpok30 Ağu 2018

  • CVE-2018-20006
    24İzleyin

    An issue was discovered in PHPok v5.0.055.

    OrtaCVSS 6,1İstismar yokEPSS %1

    phpok · phpok10 Ara 2018

  • CVE-2024-38953
    24İzleyin

    phpok 6.4.003 contains a Cross Site Scripting (XSS) vulnerability in the ok_f() method under the framework/api/upload_control.php file.

    OrtaCVSS 6,1İstismar yokEPSS %0

    phpok · phpok1 Tem 2024