Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6w8q-3v6x-w8r4

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user.

A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user.

EPSS

Процентиль: 99%
0.81123
Высокий

Связанные уязвимости

CVSS3: 7.5
nvd
больше 4 лет назад

A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user.

EPSS

Процентиль: 99%
0.81123
Высокий