NetSight
critical9.8

CVE-2017-17992

Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form_file_name parameter in a down…

Impact

Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form_file_name parameter in a download_form action.

Affected products

VendorProductAffected versions
IwcnetworkBiometric Shift Employee Management System
Version 4.0

Weakness classification

References