CVE-2024-33118

LuckyFrameWeb v3.5.2 is affected by an arbitrary read in the fileDownload method of com.luckyframe.project.common.CommonController. Evidence from multiple sources confirms the vulnerable version and component, with CVSSv3.1 base score 7.5 (HIGH) and network attack vector. Technical details across...

CVE-2024-33118

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController...

maxthon_arbitrary_read-write.html.txt

var iVuln=null; function checkVuln try if external.readFilemaxsecurityid,"m2bookmark","plugin.ini"!=null pls.innerText='Done!'; alert"Vulnerable!"; showFileContent; window.clearIntervaliVuln; else window.status=''; // Refresh the "max.src" script by setting the source file as the same file...