Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SolutionScripts Home Free search.cgi远程目录遍历漏洞
Vulnerability Description
Home Free是SolutionScripts.com推出的一组Perl CGI脚本,用来在一个Web服务器上为多个用户提供个人Web服务。 Home Free的search.cgi脚本实现上存在输入验证漏洞,远程攻击者可以利用此漏洞遍历服务器目录。 Home Free的这些脚本中有个search.cgi,它接受一个名为"letter"的参数,由于对letter参数过滤不严,这个参数的值可以是任意字符串,其中可以包含"../"这样的字串。这个漏洞可以被用来列出目录的内容以及显示指定Web文件系统以外的
CVSS Information
N/A
Vulnerability Type
N/A