CVE-2020-29134

HighCVSS 8.6/10Last modified Jun 17, 2026

Description

The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/lucxssouza/CVE-2020-29134Exploit, Third Party Advisory
https://github.com/lucxssouza/CVE-2020-29134/blob/main/README.mdExploit, Third Party Advisory
https://systemweakness.com/cve-2020-29134-totvs-fluig-platform-f298ea84b507Exploit, Third Party Advisory
https://www.exploit-db.com/exploits/49622Exploit, Third Party Advisory, VDB Entry
https://github.com/lucxssouza/CVE-2020-29134Exploit, Third Party Advisory
https://github.com/lucxssouza/CVE-2020-29134/blob/main/README.mdExploit, Third Party Advisory
https://systemweakness.com/cve-2020-29134-totvs-fluig-platform-f298ea84b507Exploit, Third Party Advisory
https://www.exploit-db.com/exploits/49622Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Mar 5, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-291354.1cPanel before 90.0.17 has multiple instances of URL parameter injection (SEC-567).CVE-2020-291366.5In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach (SEC-575).CVE-2020-291376.1cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface (SEC-577).CVE-2020-291385.3Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET_4.109.0, allows remote unauthent CVE-2020-291397.2A SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient.inc in OpenEMR before 5.0.2.5 allows a remote CVE-2020-29147.0Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior CVE-2020-291407.2A SQL injection vulnerability in interface/reports/immunization_report.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker CVE-2020-291427.2A SQL injection vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to CVE-2020-291437.2A SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to exec CVE-2020-291445.4In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard CVE-2020-291455.4In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or descr CVE-2020-291466.1A cross site scripting (XSS) vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a c