InfraPower PPS-02-S Q213V1 Local File Disclosure
Posted by deepcore on October 31, 2016 – 11:54 pm
InfraPower PPS-02-S Q213V1 suffers from a file disclosure vulnerability when input passed thru the ‘file’ parameter to ‘ListFile.php’ script is not properly verified before being used to read files. This can be exploited to disclose contents of files from local resources.
Post a reply
You must be logged in to post a comment.