CVE-2023-29881: SQL Injection
Published May 14, 2024
·Updated
phpok 6.4.003 is vulnerable to SQL injection in the function indexf() in phpok64/framework/api/callcontrol.php.
Affected Software
2 affected components
PhpOK PhpOK
PhpOK PhpOK=6.4.003
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
May 14, 2024
CVE Published
via NVD·12:55 PM
Aug 19, 2024
Data Sourced
via MITRE·06:41 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-29881?
CVE-2023-29881 is considered a high-severity vulnerability due to its potential for SQL injection.
2
How do I fix CVE-2023-29881?
To fix CVE-2023-29881, you should upgrade to a patched version of PhpOK that resolves the SQL injection issue.
3
What is the impact of CVE-2023-29881?
CVE-2023-29881 allows attackers to execute arbitrary SQL queries, potentially compromising the database and sensitive data.
4
Which version of PhpOK is vulnerable to CVE-2023-29881?
Version 6.4.003 of PhpOK is vulnerable to CVE-2023-29881.
5
Where is the vulnerability in CVE-2023-29881 located?
The vulnerability in CVE-2023-29881 is located in the function index_f() in phpok64/framework/api/call_control.php.