Vulnerabilities (CVE)

Filtered by vendor Lionwiki Subscribe
Filtered by product Lionwiki
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-27191 1 Lionwiki 1 Lionwiki 2023-12-10 5.0 MEDIUM 7.5 HIGH
LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File Inclusion. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2009-3534 1 Lionwiki 1 Lionwiki 2023-12-10 6.8 MEDIUM N/A
Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.