Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2020-21486

Disclosure Date: June 20, 2023 (last updated February 25, 2025)
SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist function in framerwork/phpok_call.php file.
Attacker Value
Unknown

CVE-2020-16629

Disclosure Date: February 08, 2021 (last updated February 22, 2025)
PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the target path.