Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. (dot dot) attack in the show parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Hyperseek 2000搜索引擎目录遍历漏洞
Vulnerability Description
Hyperseek 2000是一个基于Web的搜索引擎软件包。 Hyperseek 2000搜索引擎的一个统计模块程序中存在一个安全漏洞,可能导致远程攻击者查看任意文件(以Web Server运行权限)或得到目录列表。 问题出在hsx.cgi程序中,这个perl脚本没有过滤"../"和%00等特殊字符,导致攻击者可以远程进行目录遍历,获取任意系统文件内容。
CVSS Information
N/A
Vulnerability Type
N/A