High severity · published Oct 22, 2026
CVE-2022-51023
PHPOK < 5.4.081 SQL Injection via api.php sort Parameter
New
8.2
CVSS
0.3%
EPSS
No
On KEV
Description
PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate ORDER BY clauses via the sort parameter. Attackers can send GET requests to /api.php?c=project&f=index with extractvalue payloads in sort to extract database information through error messages. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
PHPOK · PHPOK
4.5.000 before 5.4.081 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-51023
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-51023
github.com
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/phpok-sqli.yaml
github.com
https://github.com/qinggan/phpok/commit/d70c396f
www.vulncheck.com
https://www.vulncheck.com/advisories/phpok-5.4.081-sql-injection-via-api-php-sort-parameter
More from PHPOK
9.8
CVE-2022-47129
PHPOK v6.3 was discovered to contain a remote code execution (RCE) vulnerability
9.8
CVE-2022-40889
Phpok 6.1 has a deserialization vulnerability via framework/phpok_call.php
9.8
CVE-2022-29363
Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function in login_control.php
9.8
CVE-2020-18440
Buffer overflow vulnerability in framework/init.php in qinggan phpok 5.1, allows attackers to execute arbitrary code
9.8
CVE-2020-16629
PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a…