EyeLock nano NXT 3.5 Local File Disclosure
Posted by deepcore on August 11, 2016 – 8:44 am
nano NXT suffers from a file disclosure vulnerability when input passed thru the ‘path’ parameter to ‘logdownload.php’ script is not properly verified before being used to read files. This can be exploited to disclose contents of files from local resources.
Post a reply
You must be logged in to post a comment.