CVE-2018-19562

NONE EPSS 80.4%
Published Nov 26, 20187y ago · Modified Jun 17, 20262w ago
Find Similar
Published Nov 26, 2018 7y ago
Last Modified Jun 17, 2026 2w ago

Description

An issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to execute arbitrary code via a "Login Background > Program Upgrade > Compressed Packet Upgrade" action in which a .php file is inside a ZIP archive.

Threat Intelligence

EPSS Exploit Probability
80.4% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-434 Unrestricted Upload of File with Dangerous Type Resource Mgmt

Affected Products 1

VendorProductVersionRange
phpokphpok4.9.015any

References 1

  • iwantacve.cn http://www.iwantacve.cn/index.php/archives/87/
    ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.