high7.5Public exploit code
CVE-2017-17876
Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Biometric Shift Employee Management System 3.0 - Local File Disclosure2017-12-26 · webapps · php
Impact
Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iwcnetwork | Shift | Version 3.0 |