CVE-2018-12492: Input Validation
Published Jun 15, 2018
·Updated
PHPOK 4.9.032 has an arbitrary file deletion vulnerability in the delfilef function in framework/admin/tplcontrol.php.
Affected Software
1 affected component
PhpOK PhpOK=4.9.032
Event History
Jun 15, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-12492?
CVE-2018-12492 is rated as a high severity vulnerability due to the potential for arbitrary file deletion.
2
How does CVE-2018-12492 occur?
CVE-2018-12492 occurs due to a flaw in the delfile_f function within the framework/admin/tpl_control.php file, allowing unauthorized file deletions.
3
How can I fix CVE-2018-12492?
To fix CVE-2018-12492, you should upgrade to a newer version of PHPOK that addresses this vulnerability.
4
What systems are affected by CVE-2018-12492?
CVE-2018-12492 specifically affects PHPOK version 4.9.032.
5
What are the risks of not addressing CVE-2018-12492?
Not addressing CVE-2018-12492 could lead to data loss and unauthorized access to sensitive files.