3 matches found
PT-2021-10170
Name of the Vulnerable Software and Affected Versions: qinggan phpok version 5.1 Description: An issue was discovered in the edit save f function in framework/admin/tpl control.php, allowing attackers to write arbitrary files or get a shell. Recommendations: For qinggan phpok version 5.1, conside...
PT-2019-14531
Name of the Vulnerable Software and Affected Versions OKLite version 1.2.25 Description An issue was discovered in the framework/admin/tpl control.php file, allowing remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring. Recommendation...
PT-2018-11214
Name of the Vulnerable Software and Affected Versions PHPOK version 4.9.032 Description The issue is related to an arbitrary file deletion vulnerability. It affects the delfile f function located in framework/admin/tpl control.php. Recommendations For PHPOK version 4.9.032, consider restricting...