Phpok vulnerabilities

Products

• Phpok 22
• Oklite 2

Newest

• phpok PHPOK < 5.4.081 SQL Injection via api.php sort Parameter CVE-2022-51023 8.8 HighOctober 22, 2026
• phpok phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component ... CVE-2024-44867 Public exploit 7.5 HighSeptember 10, 2024
• phpok phpok 6.4.003 contains a Cross Site Scripting (XSS) vulnerability in the ok_f() method under the... CVE-2024-38953 6.1 MediumJuly 1, 2024
• phpok phpok 6.4.003 is vulnerable to SQL injection in the function index_f() in phpok64/framework/api... CVE-2023-29881 6.5 MediumMay 9, 2024
• phpok SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive... CVE-2020-21486 7.5 HighJune 20, 2023
• phpok An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers... CVE-2023-33601 8.8 HighJune 7, 2023
• phpok PHPOK unrestricted upload CVE-2023-2888 4.7 MediumMay 25, 2023
• phpok PHPOK v6.3 was discovered to contain a remote code execution (RCE) vulnerability. CVE-2022-47129 9.8 CriticalMay 11, 2023
• phpok File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain... CVE-2021-34076 8.8 HighMay 11, 2023
• phpok Phpok 6.1 has a deserialization vulnerability via framework/phpok_call.php. CVE-2022-40889 9.8 CriticalOctober 18, 2022
• phpok Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function... CVE-2022-29363 9.8 CriticalMay 12, 2022
• phpok Buffer overflow vulnerability in framework/init.php in qinggan phpok 5.1, allows attackers to... CVE-2020-18440 9.8 CriticalNovember 2, 2021
• phpok An issue was discoverered in in function edit_save_f in framework/admin/tpl_control.php in... CVE-2020-18439 9.1 CriticalNovember 2, 2021
• phpok Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive... CVE-2020-18438 7.5 HighNovember 2, 2021
• phpok A Cross Site Request Forgery (CSRF) vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f... CVE-2020-19199 8.8 HighMay 10, 2021
• phpok PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through... CVE-2020-16629 9.8 CriticalFebruary 8, 2021
• phpok oklite framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability... CVE-2019-16131 8.8 HighSeptember 9, 2019
• phpok oklite An issue was discovered in OKLite v1.2.25. framework/admin/tpl_control.php allows remote... CVE-2019-16132 6.5 MediumSeptember 9, 2019
• phpok An issue was discovered in PHPok v5.0.055. There is a Stored XSS vulnerability via the title... CVE-2018-20006 6.1 MediumDecember 10, 2018
• phpok An issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to... CVE-2018-19562 8.8 HighNovember 26, 2018
• phpok PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/login_control.php via the _back... CVE-2018-16142 6.1 MediumAugust 30, 2018
• phpok PHPOK 4.9.032 has an arbitrary file deletion vulnerability in the delfile_f function in framework... CVE-2018-12492 7.5 HighJune 15, 2018
• phpok PHPOK 4.9.032 has an arbitrary file upload vulnerability in the import_f function in framework... CVE-2018-12491 9.8 CriticalJune 15, 2018
• phpok PHPOK 4.8.338 has an arbitrary file upload vulnerability. CVE-2018-8944 9.8 CriticalMarch 22, 2018