CVE-2022-29363: Phpok

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function in login_control.php. This vulnerability allows attackers to getshell via writing arbitrary files.

Affected products

• Phpok Phpok: version 6.1 only

Published 2022-05-12. Last modified 2026-06-17.