CVE-2021-34076: Malicious File Upload
Published May 11, 2023
·Updated
File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file upload.
Affected Software
1 affected component
PhpOK PhpOK=5.7.140
Event History
May 11, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-34076?
CVE-2021-34076 has a high severity rating due to its ability to allow remote code execution through crafted file uploads.
2
How do I fix CVE-2021-34076?
To fix CVE-2021-34076, upgrade PHPOK to the latest version that addresses this vulnerability.
3
What type of attack is possible with CVE-2021-34076?
CVE-2021-34076 allows remote attackers to execute arbitrary code on affected systems by uploading malicious zip files.
4
Which versions of PHPOK are affected by CVE-2021-34076?
CVE-2021-34076 specifically affects PHPOK version 5.7.140.
5
What are the potential impacts of CVE-2021-34076?
The potential impacts of CVE-2021-34076 include unauthorized access, data compromise, and system control escalation for attackers.