CVE-2021-39433

A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to…

published October 4, 2021

CVSS
—
EPSS
9%
Percentile
95.1
In the wild
Unconfirmed
What it is

A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08687 · 95.1th percentile
Published
2021-10-04T19:16Z
EPSS history
Timeline
  • 04 OCT 19:16Z
    A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to…
    cvelistv5