CVE-2023-2888: PHPOK unrestricted upload
Published May 25, 2023
·Updated
A vulnerability, which was classified as problematic, was found in PHPOK 6.4.100. This affects an unknown part of the file /admin.php?c=upload&f=zip&noCache=0.1683794968. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-229953 was assigned to this vulnerability.
Affected Software
1 affected component
PhpOK PhpOK=6.4.100
Event History
May 25, 2023
CVE Published
01:00 PM
Data Sourced
01:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-2888?
The severity of CVE-2023-2888 is high with a CVSS score of 8.8.
2
How does CVE-2023-2888 affect PHPOK?
CVE-2023-2888 affects PHPOK version 6.4.100.
3
What is the vulnerability in PHPOK 6.4.100?
The vulnerability in PHPOK 6.4.100 is an unrestricted upload vulnerability.
4
Can the attack be initiated remotely?
Yes, the attack can be initiated remotely.
5
How can I fix CVE-2023-2888?
To fix CVE-2023-2888, update PHPOK to a version that addresses the unrestricted upload vulnerability.