Hellogoldsnakeman

Name of the Vulnerable Software and Affected Versions: PHPOK version 5.2.060 Description: A Cross Site Request Forgery (CSRF) issue exists, which could allow a remote malicious user to execute arbitrary code via the "admin.php?c=admin&f=save" API endpoint, specifically through the `c` and `f` parameters. Recommendations: For PHPOK version 5.2.060, as a temporary workaround, consider restricting access to the "admin.php" endpoint until a patch is available. Avoid using the `c` and `f` parameters in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.