CVE-2020-27191

published 2020-11-16

CVE-2020-27191: LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File…

Priority P3 57 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

EXPLOIT

LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File Inclusion. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
lionwiki	lionwiki	< 3.2.12	3.2.12

Detection & IOCs extracted from sources · hover to see the quote

path /index.php↗

• → A successful LFI exploitation response will return HTTP 200 and contain the Unix passwd file pattern root:[x*]:0:0: ↗
• → The vulnerability is unauthenticated — no session or credentials are required to trigger the LFI via the f1 variable in index.php with action=edit and restore=1 ↗

• · This vulnerability only affects LionWiki versions prior to 3.2.12, which is an end-of-life product no longer supported by the maintainer ↗

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.