CVE-2016-20104

The EyeLock nano NXT versions 3.05.1193 , 3.04.1108 , 3.03.944 , and 3.01.646 are vulnerable to a path traversal vulnerability in the /scripts/logdownload.php script. The root cause is the unvalidated use of the 'path' parameter within the readfile() function, which allows unauthenticated attacke...