Browse CVEs

HIGH 7.5 CVE-2024-44867 phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php. Phpok No fix yet Fix from $1,9502024-09-10 MEDIUM 6.1 CVE-2024-38953 phpok 6.4.003 contains a Cross Site Scripting (XSS) vulnerability in the ok_f() method under the framework/api/upload_control.php file. Phpok No fix yet Fix from $1,6002024-07-01 MEDIUM 6.5 CVE-2023-29881 phpok 6.4.003 is vulnerable to SQL injection in the function index_f() in phpok64/framework/api/call_control.php. Phpok No fix yet Fix from $1,6002024-05-14 HIGH 7.5 CVE-2020-21486 SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist function in framerwork/phpok_c… Phpok No fix yet Fix from $1,9502023-06-20 HIGH 8.8 CVE-2023-33601 An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP file. Phpok No fix yet Fix from $1,9502023-06-07 HIGH 8.8 CVE-2023-2888 A vulnerability, which was classified as problematic, was found in PHPOK 6.4.100. This affects an unknown part of the file /admin.php?c=upload&f=zip&… Phpok No fix yet Fix from $1,9502023-05-25 CRITICAL 9.8 CVE-2022-47129 PHPOK v6.3 was discovered to contain a remote code execution (RCE) vulnerability. Phpok No fix yet Fix from $2,3002023-05-11 HIGH 8.8 CVE-2021-34076 File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file upload. Phpok No fix yet Fix from $1,9502023-05-11 CRITICAL 9.8 CVE-2022-40889 Phpok 6.1 has a deserialization vulnerability via framework/phpok_call.php. Phpok No fix yet Fix from $2,3002022-10-18 CRITICAL 9.8 CVE-2022-29363 Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function in login_control.php. This vulnerability allows atta… Phpok No fix yet Fix from $2,3002022-05-12 CRITICAL 9.8 CVE-2020-18440 Buffer overflow vulnerability in framework/init.php in qinggan phpok 5.1, allows attackers to execute arbitrary code. Phpok No fix yet Fix from $2,3002021-11-02 CRITICAL 9.1 CVE-2020-18439 An issue was discoverered in in function edit_save_f in framework/admin/tpl_control.php in qinggan phpok 5.1, allows attackers to write arbitrary fil… Phpok No fix yet Fix from $2,3002021-11-02 HIGH 7.5 CVE-2020-18438 Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the title parameter to admin.php. Phpok No fix yet Fix from $1,9502021-11-02 HIGH 8.8 CVE-2020-19199 A Cross Site Request Forgery (CSRF) vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execu… Phpok No fix yet Fix from $1,9502021-05-10 CRITICAL 9.8 CVE-2020-16629 PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement functio… Phpok No fix yet Fix from $2,3002021-02-08 HIGH 8.8 CVE-2019-16131EPSS 7% framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be writte… Oklite No fix yet Fix from $1,9502019-09-09 MEDIUM 6.5 CVE-2019-16132EPSS 6% An issue was discovered in OKLite v1.2.25. framework/admin/tpl_control.php allows remote attackers to delete arbitrary files via a title directory-tr… Oklite No fix yet Fix from $1,6002019-09-09 MEDIUM 6.1 CVE-2018-20006 An issue was discovered in PHPok v5.0.055. There is a Stored XSS vulnerability via the title parameter to api.php?c=post&f=save (reachable via the in… Phpok No fix yet Fix from $1,6002018-12-10 HIGH 8.8 CVE-2018-19562 An issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to execute arbitrary code via a "Login Background > Prog… Phpok No fix yet Fix from $1,9502018-11-26 MEDIUM 6.1 CVE-2018-16142 PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/login_control.php via the _back parameter to the ok_f function. Phpok No fix yet Fix from $1,6002018-08-30 CRITICAL 9.8 CVE-2018-12491 PHPOK 4.9.032 has an arbitrary file upload vulnerability in the import_f function in framework/admin/modulec_control.php, as demonstrated by uploadin… Phpok No fix yet Fix from $2,3002018-06-15 HIGH 7.5 CVE-2018-12492 PHPOK 4.9.032 has an arbitrary file deletion vulnerability in the delfile_f function in framework/admin/tpl_control.php. Phpok No fix yet Fix from $1,9502018-06-15 CRITICAL 9.8 CVE-2018-8944 PHPOK 4.8.338 has an arbitrary file upload vulnerability. Phpok No fix yet Fix from $2,3002018-03-22