ZKTeco ZKBioSecurity 3.0 contains a file path manipulation vulnerability that allows attackers to access arbitrary files by modifying file paths used

APPLICATION

ZKTECO

16-03-2026 11:20

CVE-2016-20029 Vulnerabilidad documentada

Sin puntuación

Tags

#source

#form

#config

#zkteco

#application

#vulnerability

#attackers

#bypass

#arbitrary

#security

#protect

#pass

#manipulate

#configuration

#allow

#attack

#access

Descripción

ZKTeco ZKBioSecurity 3.0 contains a file path manipulation vulnerability that allows attackers to access arbitrary files by modifying paths used retrieve local resources. Attackers can manipulate parameters bypass controls and sensitive information including configuration files, source code, protected application

https://cxsecurity.com/issue/WLB-2016090001

https://exchange.xforce.ibmcloud.com/vulnerabilities/116489

https://packetstormsecurity.com/files/138570

https://www.exploit-db.com/exploits/40326/

https://www.vulncheck.com/advisories/zkteco-zkbiosecurity-file-path-manipulation-vulnerability

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5365.php

Referencia

Link externo

Ver detalles

Fuente

https://nvd.nist.gov/vuln/detail/CVE-2016-20029

Resultados similares

Coincidentes en almenos en 50% de los tags

16-03-2026 CVE-2016-20032
ZKTeco ZKAccess Security System 5.3.1 contains a stored cross-site scripting vulnerability that...
Ver información

16-03-2026 CVE-2016-20031
ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp th...
Ver información