CVE-2024-2318

A vulnerability was found in ZKTeco ZKBio Media 2.0.0x642024-01-29-1028. It has been classified as problematic. Affected is an unknown function of the file /pro/common/download of the component Service Port 9999. The manipulation of the argument fileName with the input ../../../../zkbiomedia.sql...

CVE-2024-2318 ZKTeco ZKBio Media Service Port 9999 download path traversal

A vulnerability was found in ZKTeco ZKBio Media 2.0.0x642024-01-29-1028. It has been classified as problematic. Affected is an unknown function of the file /pro/common/download of the component Service Port 9999. The manipulation of the argument fileName with the input ../../../../zkbiomedia.sql...

CVE-2024-2318

CVE-2024-2318 affects ZKTeco ZKBio Media 2.0.0_x64_2024-01-29-1028. Affected is an unknown function in the /pro/common/download path on Service Port 9999. Manipulating the fileName parameter with ../../../../zkbio_media.sql results in a path traversal: '../filedir', enabling remote exploitation. ...