An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to retrieve PHP files from the server via Local File Inclusion.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Isigeo_web | Geomatika | 6.0 (including) | 6.0 (including) |
References
- https://github.com/Orange-Cyberdefense/CVE-repository
- https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_geomatika_isigeoweb.md
- https://www.geomatika.fr/isigeo-web/
- https://github.com/Orange-Cyberdefense/CVE-repository
- https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_geomatika_isigeoweb.md
- https://www.geomatika.fr/isigeo-web/