CVE-2023-38956

CVE-2023-38956 affects ZKTeco BioAccess IVS v3.3.1. A path traversal flaw (failure to properly filter path elements) can allow unauthenticated attackers to read arbitrary files by sending a crafted payload. The vulnerability is documented across multiple sources (CNVD, RH Red Hat, NVD) with consi...

ZKTeco BioAccess IVS 路径遍历漏洞

ZKTeco BioAccess IVS is a lite web-based security platform from ZKTeco, China. A path traversal vulnerability exists in ZKTeco BioAccess IVS v3.3.1, which stems from the program's failure to properly filter special elements in the path of a resource or file, and can be exploited by an attacker to...

CVE-2023-38954

ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability...

PT-2023-4126 · Zkteco · Zkteco Bioaccess Ivs

Name of the Vulnerable Software and Affected Versions: ZKTeco BioAccess IVS version 3.3.1 Description: The issue is related to insufficient protection of service data in the ZKTeco BioAccess IVS web platform, which can be exploited by remote attackers to gain unauthorized access to sensitive...

PT-2023-4125 · Zkteco · Zkteco Bioaccess Ivs

Name of the Vulnerable Software and Affected Versions: ZKTeco BioAccess IVS version 3.3.1 Description: The issue is related to a lack of protection for the SQL query structure, which can be exploited to execute arbitrary SQL code. This can be done remotely. Recommendations: For ZKTeco BioAccess I...

PT-2023-4129 · Zkteco · Zkteco Bioaccess Ivs

Name of the Vulnerable Software and Affected Versions: ZKTeco BioAccess IVS version 3.3.1 Description: The issue is related to a path traversal vulnerability, which can be exploited by a remote attacker to read arbitrary files. This is achieved by supplying a crafted payload, allowing unauthorize...