CVE-2023-23565 | BDVDB-2026-210249 Detail

Description#

An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to retrieve PHP files from the server via Local File Inclusion.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

References#

https://www.geomatika.fr/isigeo-web/
https://github.com/Orange-Cyberdefense/CVE-repository
https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_geomatika_isigeoweb.md

Exploit#

No public exploit known

History#

Version 12023-08-22Record published in the CVE List.
Version 22024-10-02Most recent update recorded in the CVE List.