CVE-2019-16131: Malicious File Upload
Published Sep 9, 2019
·Updated
framework/admin/moduleccontrol.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data/cache/.
Affected Software
1 affected component
PhpOK Oklite=1.2.25
Event History
Sep 9, 2019
CVE Published
via MITRE·02:05 AM
Data Sourced
via MITRE·02:05 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-16131?
CVE-2019-16131 is classified as a high-severity vulnerability due to its potential for arbitrary file uploads.
2
How do I fix CVE-2019-16131?
To fix CVE-2019-16131, update to a newer version of OKLite that addresses the arbitrary file upload vulnerability.
3
What is the impact of CVE-2019-16131?
The impact of CVE-2019-16131 includes potential unauthorized access and execution of malicious PHP scripts on the server.
4
Which versions of OKLite are affected by CVE-2019-16131?
OKLite version 1.2.25 is specifically affected by CVE-2019-16131.
5
Can CVE-2019-16131 be exploited remotely?
Yes, CVE-2019-16131 can be exploited remotely by an attacker to upload malicious files.