Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-30173 EUVD-2021-17109GHSA-m7c8-3qqc-3m6c

Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Local File Inclusion

Published May 7, 2021 · Updated Sep 17, 2024 · Assigned by twcert

Description

Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated attacker inject absolute path into Url parameter and access arbitrary file.

Affected products

VendorProductAffectedFixed
Jun-He Technology Quan-Fang-Wei-Tong-Xun system 2007.2103 —

References