CVE-2021-39433

CVE-2021-39433 A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-use...

BIQS IT Biqs-drive v1.83 Local File Inclusion Detection

A local file inclusion vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user. !/usr/bin/env...

CVE-2021-39433

A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...

PT-2021-22585

Name of the Vulnerable Software and Affected Versions: BIQS IT Biqs-drive versions 1.83 and below Description: A local file inclusion LFI issue exists when sending a specific payload as the file parameter to the "download/index.php" endpoint. This allows an attacker to read arbitrary files from t...

CVE-2021-39433: Undefined Security Weakness

A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...

PT-2017-13639

Name of the Vulnerable Software and Affected Versions DenyAll WAF versions 5.5.0 through 5.5.12 DenyAll WAF version 5.6 DenyAll WAF version 5.7 DenyAll WAF versions 6.x before 6.4.1 Description The issue allows unauthenticated remote attackers to obtain authentication information by making a...

Reflected Cross-Site Scripting Vulnerability in MetInfo Version 5.3.3

MetInfo is an enterprise website management system with PHP Mysql architecture. A reflective cross-site scripting vulnerability exists in MetInfo version 5.3.3. An attacker can exploit the vulnerability to conduct cross-site scripting attacks. The vulnerability exists in the following pages:...

CVE-2006-4651: Undefined Security Weakness

Directory traversal vulnerability in download/index.php, and possibly download.php, in threesquared.net aka Ben Speakman Php download allows remote attackers to overwrite arbitrary local files via .. dot dot sequence in the file parameter...