File Upload Vulnerability in PHPOK by HolaAsuka
CVE-2021-34076

8.8HIGH

Key Information:

Vendor

PHPok

Status
PHPok
Vendor
CVE Published:
11 May 2023

What is CVE-2021-34076?

The PHPOK product version 5.7.140 is exposed to a file upload vulnerability that enables remote attackers to execute arbitrary code by uploading a specially crafted zip file. This security flaw can lead to unauthorized access and privilege escalation, compromising the integrity of the application and its data.

References

https://github.com/HolaAsuka/CVE/issues/1

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.