CVE-2020-27191 | BDVDB-2026-144813 Detail

Description#

LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File Inclusion. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lionwiki.0o.cz/index.php?page=Main+page
https://www.junebug.site/blog/cve-2020-27191-lionwiki-3-2-11-lfi

Exploit#

No public exploit known

History#

Version 12020-11-16Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.