Back to search
CVE-2021-47718
Published: Dec 9, 2025
Modified: Apr 7, 2026
PUBLISHED
Description
OpenBMCS 2.4 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive files by exploiting directory listing functionality. Attackers can browse directories like /debug/ and /php/ to discover configuration files, database credentials, and system information.
| Vendor | Product | Versions |
|---|---|---|
OPEN BMCS | OpenBMCS | affected 2.4 |
Weaknesses (CWE)
References
ExploitDB-50671
exploit
Official Product Homepage
product
Zero Science Lab Disclosure (ZSL-2022-5695)
third-party-advisory
VulnCheck Advisory: OpenBMCS Directory Listing Information Disclosure
third-party-advisory
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now