CVE-2020-18439: Critical severity phpok vulnerability
Published Nov 2, 2021
·Updated
An issue was discoverered in in function editsavef in framework/admin/tplcontrol.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell.
Affected Software
1 affected component
PhpOK PhpOK=5.1
Event History
Nov 2, 2021
CVE Published
via MITRE·05:44 PM
Data Sourced
via MITRE·05:44 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-18439?
CVE-2020-18439 has a high severity level due to its ability to allow file write operations and potential remote shell access.
2
How can I fix CVE-2020-18439?
To fix CVE-2020-18439, update PhpOK to the latest version that addresses this vulnerability.
3
What systems are affected by CVE-2020-18439?
CVE-2020-18439 specifically affects PhpOK version 5.1.
4
What type of attack can CVE-2020-18439 facilitate?
CVE-2020-18439 can facilitate arbitrary file writing or shell access for attackers.
5
Is there a patch available for CVE-2020-18439?
Yes, a patch is usually included in subsequent updates of PhpOK beyond version 5.1.