CVE-2023-29881

CVE-2023-29881

[CVE ID]
CVE-2023-29881

[Suggested description]
phpok 6.4.003 is vulnerable to SQL injection in the function index_f()
in phpok64/framework/api/call_control.php

[Vulnerability Type]
SQL Injection

[Vendor of Product]
https://github.com/qinggan/phpok

[Affected Product Code Base]
phpok - 6.4.003

[Affected Component]
https://github.com/qinggan/phpok/issues/15

[Attack Type]
Remote

[Impact Escalation of Privileges]
true

[Impact Information Disclosure]
true

[Attack Vectors]
https://github.com/qinggan/phpok/issues/15

[Reference]
https://github.com/qinggan/phpok/issues/15

[Discoverer]
Individual: northind