Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Anaconda Foundation Directory远程目录遍历漏洞
Vulnerability Description
Anaconda Foundation Directory是一个基于开放目录项目(www.dmoz.org)类似Yahoo的搜索引擎。 Anaconda Foundation Directory存在漏洞,远程攻击者可以遍历目标主机的文件系统,获取服务器上的目录和文件内容。 脚本'apexec.pl'的'template'变量没有检查用户输入的数据,远程攻击者在请求的url里使用'../'技术和在文件扩展名后加null字节加'.html'就可以遍历目录访问任意文件。
CVSS Information
N/A
Vulnerability Type
N/A