PHPOK CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH PHPOK CVE published 2026-10-22

CVE-2022-51023

PHPOK versions before 5.4.081 contain an SQL injection vulnerability via the sort parameter in api.php. This allows unauthenticated attackers to manipulate ORDER BY clauses. The vulnerability was first observed by the Shadowserver Foundation on 2023-10-14. The vulnerability can lead to potential data breaches and other security issues if not addressed promptly. Defenders should prioritize verifying exposu [truncated]