Phpok vulnerabilities
We track 3 vulnerabilities in Phpok products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2026.
Latest Phpok vulnerabilities
- 8.2 High severity
PHPOK: Improper Neutralization of Special Elements used in an SQL Command
PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate ORDER BY clauses via the sort parameter. Attackers can send GET requests to /api.php?c=project&f=index with extractvalue payloads in sort t
- 8.8 High severity
PHPOK: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as problematic, was found in PHPOK 6.4.100. This affects an unknown part of the file /admin.php?c=upload&f=zip&_noCache=0.1683794968. The manipulation leads to unrestricted upload. It is possible to initiate the attack rem
- 9.8 Critical severity
Phpok: Deserialization of Untrusted Data
Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function in login_control.php. This vulnerability allows attackers to getshell via writing arbitrary files.