Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... (modified ..) to access the file that was created for the program.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bajie Webserver远程命令执行漏洞
Vulnerability Description
Bajie Http JServer是一个用Java写的Web服务器，可以从 http://go.to/bajie 和 http://java.tucows.com 这两个站点获得。 Bajie Http JServer存在漏洞，有可能在运行Bajie Webserver的主机上远程执行任意的命令。 远程用户可以利用Bajie内置的上传特性把恶意脚本放在Bajie Webserver上。可以把这些上传脚本取名为已知的文件名，并且放在已知的目录位置上。一旦这些文件被上传，它们就可以作为CGI 脚本在服务器上
CVSS Information
N/A
Vulnerability Type
N/A