high7.5
CVE-2020-21486
SQL injection vulnerability in PHPOK v.5.4.
Impact
SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist function in framerwork/phpok_call.php file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpok | Phpok | Version 5.4 |