Approved changes feed: RSS · Atom

cpe:2.3:a:phpok:phpok:5.4.137:*:*:*:*:*:*:*

part: a version: 5.4.137 update: *

VendorPhpok (439d479a-8107-5c6b-ae3e-490af3b0d07d)
ProductPhpok (e6a49db0-cb7c-58fa-a8e2-a97bd2288b21)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/qinggan/phpok purl2cpe 2026-06-01 10:17:55.004358

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-16629 vulnerable 2026-06-08 05:19:27.934749 Details available
PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the target path.
Published: 2021-02-08T14:33:34.000Z
Updated: 2024-08-04T13:45:33.208Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.