CVE-2023-33601: Phpok

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP file.

Affected products

• Phpok Phpok: version 6.4.100 only

Published 2023-06-07. Last modified 2026-06-17.