Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Phpok Subscribe
Filtered by product Oklite
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-16131 1 Phpok 1 Oklite 2019-09-10 6.5 MEDIUM 8.8 HIGH
framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data/cache/.
CVE-2019-16132 1 Phpok 1 Oklite 2019-09-10 5.5 MEDIUM 6.5 MEDIUM
An issue was discovered in OKLite v1.2.25. framework/admin/tpl_control.php allows remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring.