CAREL Boss Mini <= 1.4.0 - Local File Inclusion
Boss Mini 1.4.0 Build 6221 contains a file inclusion caused by manipulation of the 'path' argument in boss/servlet/document, letting remote attackers include arbitrary files, exploit requires remote access.
CAREL Boss MiniPoC 已收录
CVSS—