RULE(RULE ID:330979)

Rule General Information
Release Date: 2024-04-28
Rule Name: OKLite v1.2.25 File Upload Vulnerability (CVE-2019-16131)
Severity:
CVE ID:
Rule Protection Details
Description: framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data/cache/.
Impact: An attacker could exploit this vulnerability to upload arbitrary file.
Affected OS: Windows, Others
Reference: http://www.iwantacve.cn/index.php/archives/289/
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://www.phpok.com