Lucene search

MitreCVE-2023-33601

HistoryJun 07, 2023 - 2:15 a.m.

CVE-2023-33601

2023-06-0702:15:15

CWE-434

mitre

web.nvd.nist.gov

cve-2023-33601

arbitrary file upload

admin.php

phpok v6.4.100

vulnerability

nvd

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

38.1%

JSON

An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP file.

Affected configurations

Nvd

Node

phpokphpokMatch6.4.100

VendorProductVersionCPE
phpokphpok6.4.100cpe:2.3:a:phpok:phpok:6.4.100:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpok	phpok	6.4.100	cpe:2.3:a:phpok:phpok:6.4.100:::::::*

References

gitee.com/phpok/phpok/issues/I72D24

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

38.1%

JSON

Related for CVE-2023-33601