medium6.5
CVE-2019-16132
An issue was discovered in OKLite v1.2.25.
Impact
An issue was discovered in OKLite v1.2.25. framework/admin/tpl_control.php allows remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpok | Oklite | Version 1.2.25 |