CVE-2020-21486

2023-06-2000:00:00

mitre

www.cve.org

phpok

v5.4

sql injection

remote attacker

sensitive information

userlist function

framework

phpok_call.php file

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

43.5%

JSON

SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist function in framerwork/phpok_call.php file.

References

github.com/qinggan/phpok/issues/8