Remote Code Execution Vulnerability in PHPok 4.9.015 by PHP
CVE-2018-19562

8.8HIGH

Key Information:

Vendor

PHPok

Status
PHPok
Vendor
CVE Published:
26 November 2018

What is CVE-2018-19562?

A remote code execution vulnerability exists in PHPok 4.9.015, where attackers can exploit the 'Login Background > Program Upgrade > Compressed Packet Upgrade' functionality to upload a ZIP archive containing a malicious PHP file. This flaw enables unauthorized execution of arbitrary code, posing significant security risks to affected systems.

References

http://www.iwantacve.cn/index.php/archives/87/
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.