CVE Catalog
CVE-2017-17992
CriticalSummary
The Biometric Shift Employee Management System allows arbitrary file download via directory traversal sequences in the form_file_name parameter in a download_form action.
Risk Assessment
An attacker could gain access to sensitive files on the server, potentially leading to data leaks or other serious security incidents.
Recommendation
It is recommended to implement input validation and restrict file access to prevent unauthorized downloads.
Original NVD description (English source)
Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form_file_name parameter in a download_form action.