CVE-2022-51023
validatedZero produced an exploit or a check.GHSA-hv8g-4wwm-c979 ↗EUVD-2022-56067 ↗
description
PHPOK releases from 4.5.000 through versions before 5.4.081 mishandle a sorting input used by the project API. An unauthenticated remote party who can reach that API route may cause database information to be exposed through error handling.
mitigation
Upgrade PHPOK to version 5.4.081. Until upgrade, restrict unauthenticated access to the affected project API route.
fixed in 5.4.081
outcome
Check only, differential: the check fires on the vulnerable build and is silent on the patched one.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-22vulncheck_kev: trigger signal, started the run
- 2026-10-22 00:00Z
- 2026-10-22 10:57Zcve.org record for CVE-2022-51023
this entry in the feed
GET /api/v1/feed/CVE-2022-51023
{ "etk_id": "ETK-2026-2463", "cve_id": "CVE-2022-51023", "display_id": "CVE-2022-51023", "ghsa_id": "GHSA-hv8g-4wwm-c979", "euvd_id": "EUVD-2022-56067", "status": "published", "anchor_state": "anchored", "title": "SQL injection in PHPOK project sorting", "summary": "PHPOK releases from 4.5.000 through versions before 5.4.081 mishandle a sorting input used by the project API. An unauthenticated remote party who can reach that API route may cause database information to be exposed through error handling.", "mitigation": "Upgrade PHPOK to version 5.4.081. Until upgrade, restrict unauthenticated access to the affected project API route.", "vendor": "PHPOK", "product": "PHPOK", "affected": [ { "affected_notes": [], "affected_ranges": [ ">= 4.5.000, < 5.4.081" ], "ecosystem": null, "fixed_versions": [ "5.4.081" ], "package_name": "PHPOK", "purl": null } ], "cwes": null, "cvss_score": 8.8, "cvss_src": "other", "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N", "epss_score": null, "epss_percentile": null, "epss_asof": null, "automation": "deterministic", "check": true, "check_confidence_basis": "differential", "exploit": false, "pipeline_minutes": 13.73231175, "t0_at": "2026-10-22T10:57:33.897000+00:00", "signals": { "check": { "at": "2026-10-22T16:42:08.713988+00:00", "days": 0.23929186328703703, "is_lower_bound": false, "measured_at": "2026-10-22T10:57:33.897000+00:00", "url": null }, "kev": { "at": "2026-10-22T00:00:00+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-22T10:57:33.897000+00:00", "precision": "day", "url": "https://vulncheck.com/cve/CVE-2022-51023" }, "trigger_signal": { "at": "2026-10-22T00:00:00+00:00", "days": -0.4566423263888889, "is_lower_bound": false, "measured_at": "2026-10-22T10:57:33.897000+00:00", "url": "https://vulncheck.com/cve/CVE-2022-51023" } } }
published 2026-10-22 16:28Z
last change 2026-10-22 17:30Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.