Security Advisory

CVE-2021-39433

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-10-04 19:16:26

Last updated 2024-08-04 02:06:42

Assigner mitre

State PUBLISHED

Description

A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user.

← Browse all CVEs View on cve.org ↗