CVE-2019-16131

CVE-2019-16131 affects OKLite v1.2.25 in the component framework/admin/modulec_control.php, which exposes an Arbitrary File Upload vulnerability. A PHP file contained in a ZIP archive can be written to /data/cache/, enabling potential remote code execution or defacement depending on the environme...

CVE-2019-16132

CVE-2019-16132 affects OKLite v1.2.25. The issue is in framework/admin/tpl_control.php, where a title directory-traversal pathname combined with a crafted substring allows remote attackers to delete arbitrary files. The Red Hat advisory corroborates the same description. The provided documents do...