CVE-2020-36878
HIGHReQuest Serious Play Media Player 3.0 - Info Disclosure
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-36878. PoCs published by LiquidWorm.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in ReQuest Serious Play Media Player 3.0, allowing unauthenticated file disclosure via the 'file' parameter in tail.html and file.html scripts. The PoC includes example URLs to exploit the vulnerability.
Description
ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verified before being used to read web log files. Attackers can exploit this to disclose contents of files from local resources.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in ReQuest Serious Play Media Player 3.0, allowing unauthenticated file disclosure via the 'file' parameter in tail.html and file.html scripts. The PoC includes example URLs to exploit the vulnerability.
References (3)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N