CVE-2019-16132

An issue was discovered in OKLite v1.2.25. framework/admin/tplcontrol.php allows remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring...

EUVD-2019-6969

Malware in sbrugna...

CVE-2019-16131

framework/admin/moduleccontrol.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data/cache/...

File Upload Vulnerability in OKLite

OKLite is an enterprise website system, the main target group is the display enterprise website users, so that the traditional small business quickly deploy the website. A file upload vulnerability exists in OKLite, which can be exploited by attackers to upload a webshell and gain server privileg...

File upload vulnerability exists in OKLite (CNVD-2021-19721)

OKLite is an enterprise website system, the main target group is the display enterprise website users, so that the traditional small business quickly deploy the website. OKLite suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

OKLite suffers from a logic flaw vulnerability (CNVD-2020-71655)

OKLite is a minimalist enterprise website system, the main target group is the display enterprise website users, so that the traditional small business quickly deploy the website. OKLite suffers from a logic flaw vulnerability that can be exploited by attackers to compromise the integrity of the...

OKLite has a flawed logic vulnerability

OKLite is a minimalist enterprise website system, the main target group is the display enterprise website users, so that the traditional small business quickly deploy the website. OKLite suffers from a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in OKLite

KLite is a minimalist enterprise station system, the main target group is the display of enterprise website users, so that the traditional small business quickly deployed website. OKLite has a file upload vulnerability that can be exploited by attackers to gain server privileges...

CVE-2019-16132

An issue was discovered in OKLite v1.2.25. framework/admin/tplcontrol.php allows remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring...

CVE-2019-16131

framework/admin/moduleccontrol.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data/cache/...

CVE-2019-16131

framework/admin/moduleccontrol.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data/cache/...

CVE-2019-16132

An issue was discovered in OKLite v1.2.25. framework/admin/tplcontrol.php allows remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring...

Design/Logic Flaw

framework/admin/moduleccontrol.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data/cache/...

CVE-2019-16131

CVE-2019-16131 affects OKLite v1.2.25 in the component framework/admin/modulec_control.php, which exposes an Arbitrary File Upload vulnerability. A PHP file contained in a ZIP archive can be written to /data/cache/, enabling potential remote code execution or defacement depending on the environme...

CVE-2019-16131

framework/admin/moduleccontrol.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data/cache/...

CVE-2019-16132

CVE-2019-16132 affects OKLite v1.2.25. The issue is in framework/admin/tpl_control.php, where a title directory-traversal pathname combined with a crafted substring allows remote attackers to delete arbitrary files. The Red Hat advisory corroborates the same description. The provided documents do...

CVE-2019-16132

An issue was discovered in OKLite v1.2.25. framework/admin/tplcontrol.php allows remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring...

PT-2019-14530

Name of the Vulnerable Software and Affected Versions OKLite version 1.2.25 Description The issue allows for an Arbitrary File Upload due to the ability to write a .php file from a ZIP archive to the /data/cache/ directory. Recommendations For OKLite version 1.2.25, consider restricting access to...

CVE-2019-16131: Unrestricted Upload of File with Dangerous Type

framework/admin/moduleccontrol.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data/cache/...

PT-2019-14531

Name of the Vulnerable Software and Affected Versions OKLite version 1.2.25 Description An issue was discovered in the framework/admin/tpl control.php file, allowing remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring. Recommendation...