cve/2021/CVE-2021-34805.md

CVE-2021-34805

Description

An issue was discovered in FAUST iServer before 9.0.019.019.7. For each URL request, it accesses the corresponding .fau file on the operating system without preventing %2e%2e%5c directory traversal.

POC

Reference

• http://packetstormsecurity.com/files/165701/FAUST-iServer-9.0.018.018.4-Local-File-Inclusion.html
• https://sec-consult.com/vulnerability-lab/

Github

• https://github.com/20142995/Goby
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/HimmelAward/Goby_POC
• https://github.com/Z0fhack/Goby_POC