Skip to content
Noroxi

phpok records

23 published records for vendor phpok.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 21
  4. 22
  5. 23
  6. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

23 records
  • CVE-2020-18440
    39Monitor

    Buffer overflow vulnerability in framework/init.php in qinggan phpok 5.1, allows attackers to execute arbitrary code.

    CriticalCVSS 9.8No exploitEPSS 2%

    phpok · phpokNov 2, 2021

  • CVE-2018-12491
    39Monitor

    PHPOK 4.9.032 has an arbitrary file upload vulnerability in the import_f function in framework/admin/modulec_control.php, as demonstrated by

    CriticalCVSS 9.8No exploitEPSS 2%

    phpok · phpokJun 15, 2018

  • CVE-2020-16629
    39Monitor

    PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacemen

    CriticalCVSS 9.8No exploitEPSS 1%

    phpok · phpokFeb 8, 2021

  • CVE-2022-29363
    39Monitor

    Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function in login_control.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    phpok · phpokMay 12, 2022

  • CVE-2022-47129
    39Monitor

    PHPOK v6.3 was discovered to contain a remote code execution (RCE) vulnerability.

    CriticalCVSS 9.8No exploitEPSS 1%

    phpok · phpokMay 11, 2023

  • CVE-2018-8944
    39Monitor

    PHPOK 4.8.338 has an arbitrary file upload vulnerability.

    CriticalCVSS 9.8No exploitEPSS 1%

    phpok · phpokMar 22, 2018

  • CVE-2022-40889
    39Monitor

    Phpok 6.1 has a deserialization vulnerability via framework/phpok_call.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    phpok · phpokOct 18, 2022

  • CVE-2019-16131
    37Monitor

    framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can

    HighCVSS 8.8No exploitEPSS 7%

    phpok · okliteSep 8, 2019

  • CVE-2018-19562
    36Monitor

    An issue was discovered in PHPok 4.9.015.

    HighCVSS 8.8No exploitEPSS 2%

    phpok · phpokNov 26, 2018

  • CVE-2020-18439
    36Monitor

    An issue was discoverered in in function edit_save_f in framework/admin/tpl_control.php in qinggan phpok 5.1, allows attackers to write arbi

    CriticalCVSS 9.1No exploitEPSS 1%

    phpok · phpokNov 2, 2021

  • CVE-2023-33601
    35Monitor

    An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP

    HighCVSS 8.8No exploitEPSS 1%

    phpok · phpokJun 6, 2023

  • CVE-2020-19199
    35Monitor

    A Cross Site Request Forgery (CSRF) vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious u

    HighCVSS 8.8No exploitEPSS 1%

    phpok · phpokMay 10, 2021

  • CVE-2021-34076
    35Monitor

    File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file

    HighCVSS 8.8No exploitEPSS 1%

    phpok · phpokMay 11, 2023

  • CVE-2023-2888
    35Monitor

    PHPOK unrestricted upload

    HighCVSS 8.8No exploitEPSS 1%

    phpok · phpokMay 25, 2023

  • CVE-2020-18438
    30Monitor

    Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the title parameter to admin

    HighCVSS 7.5No exploitEPSS 2%

    phpok · phpokNov 2, 2021

  • CVE-2024-44867
    30Monitor

    phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php.

    HighCVSS 7.5Proof of conceptEPSS 1%

    phpok · phpokSep 10, 2024

  • CVE-2018-12492
    30Monitor

    PHPOK 4.9.032 has an arbitrary file deletion vulnerability in the delfile_f function in framework/admin/tpl_control.php.

    HighCVSS 7.5No exploitEPSS 1%

    phpok · phpokJun 15, 2018

  • CVE-2020-21486
    30Monitor

    SQL injection vulnerability in PHPOK v.5.4.

    HighCVSS 7.5No exploitEPSS 1%

    phpok · phpokJun 20, 2023

  • CVE-2019-16132
    28Monitor

    An issue was discovered in OKLite v1.2.25.

    MediumCVSS 6.5No exploitEPSS 6%

    phpok · okliteSep 8, 2019

  • CVE-2023-29881
    26Monitor

    phpok 6.4.003 is vulnerable to SQL injection in the function index_f() in phpok64/framework/api/call_control.php.

    MediumCVSS 6.5No exploitEPSS 0%

    phpok · phpokMay 14, 2024

  • CVE-2018-16142
    24Monitor

    PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/login_control.php via the _back parameter to the ok_f function.

    MediumCVSS 6.1No exploitEPSS 1%

    phpok · phpokAug 30, 2018

  • CVE-2018-20006
    24Monitor

    An issue was discovered in PHPok v5.0.055.

    MediumCVSS 6.1No exploitEPSS 1%

    phpok · phpokDec 10, 2018

  • CVE-2024-38953
    24Monitor

    phpok 6.4.003 contains a Cross Site Scripting (XSS) vulnerability in the ok_f() method under the framework/api/upload_control.php file.

    MediumCVSS 6.1No exploitEPSS 0%

    phpok · phpokJul 1, 2024