Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2020-21486
Disclosure Date: June 20, 2023 (last updated February 25, 2025)
SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist function in framerwork/phpok_call.php file.
0
Attacker Value
Unknown
CVE-2020-16629
Disclosure Date: February 08, 2021 (last updated February 22, 2025)
PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the target path.
0