Oliver 5 Library Server <8.00.008.053 - Local File Inclusion

By kannthu

High

Vidoc Module

#lfi#oliver#edb#windows

Description

Author: gy741 Classification CWE-ID: CWE-22 CVSS-Metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS-Score: 7.5 Oliver 5 Library Server versions prior to 8.00.008.053 are vulnerable to local file inclusion via the FileServlet function. Reference - https://www.exploit-db.com/exploits/50599 - https://www.softlinkint.com/product/oliver/ Metadata max-request: 1

Module preview

Concurrent Requests (1)

1. HTTP Request template

GET/oliver/FileServlet?...

Matching conditions

word: bit app support, fonts, extensions

Passive global matcher

No matching conditions.

On match action

Report vulnerability