CVE-2019-16132: Path Traversal
Published Sep 9, 2019
·Updated
An issue was discovered in OKLite v1.2.25. framework/admin/tplcontrol.php allows remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring.
Affected Software
1 affected component
PhpOK Oklite=1.2.25
Event History
Sep 9, 2019
CVE Published
via MITRE·02:04 AM
Data Sourced
via MITRE·02:04 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-16132?
CVE-2019-16132 has a high severity level due to its potential for allowing remote attackers to delete arbitrary files.
2
How do I fix CVE-2019-16132?
To fix CVE-2019-16132, update OKLite to the latest version that addresses this vulnerability.
3
What are the potential impacts of CVE-2019-16132?
The impact of CVE-2019-16132 includes unauthorized deletion of files, which can lead to data loss and system compromise.
4
Who is affected by CVE-2019-16132?
CVE-2019-16132 affects users of OKLite version 1.2.25.
5
What type of vulnerability is CVE-2019-16132?
CVE-2019-16132 is a path traversal vulnerability that allows attackers to manipulate file paths.