Phpok

Phpok is a modestly represented web-based content-management and file-handling platform with a narrow product line centered on the core Phpok and OKLite applications. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and recur across a consistent set of input-handling and deserialization weaknesses: unrestricted file uploads, path traversal, cross-site scripting, SQL injection, and unsafe deserialization of untrusted data. These weakness classes reflect the file-upload and dynamic content generation mechanics inherent to web-facing CMS platforms and present a direct attack surface to unauthenticated users. Defenders deploying Phpok or OKLite should prioritize input validation hardening, restrict file-upload functionality to safe types and directories, and monitor for unsafe deserialization patterns in configuration or plugin handling. Live severity, exploitation, and exposure counts are shown alongside this summary.