CVE-2020-21486: SQL Injection
Published Jun 20, 2023
·Updated
SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the userlist function in framerwork/phpokcall.php file.
Affected Software
1 affected component
PhpOK PhpOK=5.4
Event History
Jun 20, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2020-21486?
CVE-2020-21486 is a SQL injection vulnerability found in PHPOK v.5.4.
2
How does CVE-2020-21486 impact the system?
CVE-2020-21486 allows a remote attacker to obtain sensitive information by exploiting the SQL injection vulnerability in PHPOK v.5.4.
3
What is the severity of CVE-2020-21486?
CVE-2020-21486 has a severity rating of 7.5 (high).
4
How can I fix CVE-2020-21486?
To fix CVE-2020-21486, it is recommended to update to a patched version of PHPOK v.5.4 or apply the necessary security patches.
5
Where can I find more information about CVE-2020-21486?
You can find more information about CVE-2020-21486 at this reference: https://github.com/qinggan/phpok/issues/8.