LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File Inclusion. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Max CVSS
7.5
EPSS Score
2.11%
Published
2020-11-16
Updated
2020-11-30
Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.
Max CVSS
6.8
EPSS Score
0.76%
Published
2009-10-02
Updated
2017-09-19
2 vulnerabilities found