CVE-2021-39433

CVE-2021-39433 Existe una vulnerabilidad de inclusión de archivos local LFI en la versión BIQS IT Biqs-drive v1.83 y anteriores al enviar un payload específico como parámetro file a download/index.php. Esto permite que el atacante lea archivos arbitrarios del servidor con los permisos del usuario...

CVE-2021-39433

A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...

CVE-2021-39433: Undefined Security Weakness

A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...

Reflected Cross-Site Scripting Vulnerability in MetInfo Version 5.3.3

MetInfo is an enterprise website management system with PHP Mysql architecture. A reflective cross-site scripting vulnerability exists in MetInfo version 5.3.3. An attacker can exploit the vulnerability to conduct cross-site scripting attacks. The vulnerability exists in the following pages:...