CVE-2021-39433 | BDVDB-2026-161920 Detail

Description#

A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://biqs-drive.be/
https://github.com/PinkDraconian/CVE-2021-39433/blob/main/README.md

Exploit#

No public exploit known

History#

Version 12021-10-04Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.