CVE Catalog
CVE-2023-33601
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk0.95%
56th percentile - higher than 56% of all known CVEs
Summary
An arbitrary file upload vulnerability in phpok v6.4.100 in /admin.php?c=upload allows attackers to execute arbitrary code via a crafted PHP file.
Risk Assessment
This vulnerability could lead to remote code execution, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to update phpok to the latest version and implement appropriate security mechanisms to prevent unauthorized file uploads.
Other vulnerabilities in phpok v6.4.100
Original NVD description (English source)
An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS