11 matches found
CVE-2021-39433
CVE-2021-39433 로컬 파일 포함LFI 취약점이 BIQS IT Biqs-drive v1.83 이하 버전에 존재하며, download/index.php의 file 매개변수로 특정 페이로드를 전송할 때 발생합니다. 이를 통해 공격자는 구성된 웹 사용자의 권한으로 서버에서 임의의 파일을 읽을 수 있습니다. curl https://TARGET/download/index.php?file=../../../../../../../../../etc/passwd...
BIQS IT Biqs-drive v1.83 Local File Inclusion
A local file inclusion vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user. id: CVE-2021-394...
CVE-2021-39433
A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...
Biqs It Biqs-drive Local File Inclusion Vulnerability
Biqs It Biqs-drive is an online driving school software from the Belgian company Biqs It. BIQS IT Biqs-drive v1.83 and below is vulnerable to a local file inclusion vulnerability, which could be exploited by attackers to read arbitrary files from the server using the privileges of the configured...
CVE-2021-39433
A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...
CVE-2021-39433
A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...
Remote file inclusion
A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...
CVE-2021-39433
A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...
CVE-2021-39433
A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...
CVE-2021-39433
BIQS IT Biqs-drive v1.83 and earlier is affected by a Local File Inclusion (LFI) vulnerability in the file parameter used by download/index.php, allowing an attacker to read arbitrary server files with web-user privileges. The issue is confirmed across multiple sources (CVE-2021-39433 entries and...
Biqs It Biqs-drive 安全漏洞
Biqs It Biqs-drive is an online driving school software from the Belgian company Biqs It. BIQS IT Biqs-drive v1.83 and below is vulnerable to a local file inclusion vulnerability, which could be exploited by attackers to read arbitrary files from the server using the privileges of the configured...