GoIP-1 vulnerabilities
1 known vulnerability in GoIP-1 from DBL Technology (DBLTek). 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest first
- 8.7 High severity
GoIP-1: Improper Limitation of a Pathname to a Restricted Directory
DBLTek GoIP-1 firmware versions up to and including GHSFVT-1.1-67-5 contain a local file inclusion vulnerability. The device's web server exposes handlers (`frame.html` and `frame.A100.html`) that accept a path parameter (`content` or `sidebar`) which is not p