CVE-2018-19562

An issue was discovered in PHPok 4.9.015

published November 26, 2018

CVSS
—
EPSS
2%
Percentile
82.5
In the wild
Unconfirmed
What it is

An issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to execute arbitrary code via a "Login Background > Program Upgrade > Compressed Packet Upgrade" action in which a .php file is inside a ZIP archive.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02214 · 82.5th percentile
Published
2018-11-26T07:00Z
EPSS history
Timeline
  • 26 NOV 07:00Z
    An issue was discovered in PHPok 4.9.015
    cvelistv5