Lionwiki : Security Vulnerabilities, CVEs,
LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File Inclusion. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Max CVSS
7.5
EPSS Score
2.11%
Published
2020-11-16
Updated
2020-11-30
Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.
Max CVSS
6.8
EPSS Score
0.76%
Published
2009-10-02
Updated
2017-09-19
2 vulnerabilities found