CVE-2020-36008

OBottle 2.0 is affected by an arbitrary file write vulnerability in ct.php (CVE-2020-36008). The connected records confirm the vulnerability exists in OBottle 2.0 and describe an arbitrary file write in ct.php, but do not provide root-cause details, affected version ranges beyond 2.0, exploit sta...

CVE-2020-36009

OBottle 2.0 in cg.php (the \c\g.php path) contains an arbitrary file download vulnerability. The CVE entry documents that this affects OBottle 2.0 and impacts confidentiality (C) with partial leakage per CVSS2/3 metrics, and contributes a HIGH impact under CVSSv3. The connected sources corroborat...