Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
iCat Carbo Server carbo.dll查看任意文件漏洞
Vulnerability Description
iCat 电子商务套件是一组可以通过WEB管理创建文件目录的软件，由iCat Managers发行维护。 Carbo Server是iCat电子商务套件的一个组件，由于没有正确的处理HTTP请求，导致用户可以访问服务器上任意文件。 在Carbo Server的carbo.dll中，没有对用户的请求进行有效的检查过滤，允许在请求中包含".."，从而使攻击者可以访问到上级目录进行目录遍历，访问任意有权限读取的文件。
CVSS Information
N/A
Vulnerability Type
N/A