CVE-2021-39433

CVE-2021-39433 Una vulnerabilità di inclusione locale di file LFI esiste nella versione BIQS IT Biqs-drive v1.83 e precedenti quando si invia un payload specifico come parametro file a download/index.php. Ciò consente all'attaccante di leggere file arbitrari dal server con i permessi dell'utente...

CVE-2021-39433

A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...

Reflected Cross-Site Scripting Vulnerability in MetInfo Version 5.3.3

MetInfo is an enterprise website management system with PHP Mysql architecture. A reflective cross-site scripting vulnerability exists in MetInfo version 5.3.3. An attacker can exploit the vulnerability to conduct cross-site scripting attacks. The vulnerability exists in the following pages:...