Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Websphere/Net.Commerce泄漏安装目录的漏洞
Vulnerability Description
CVE(CAN) ID: CAN-2001-0389 Net.Commerce是IBM发行的产品的Websphere平台的一部分。它提供了一些通用的特性使电子 商务变得更加容易，其性能和可靠性也有独到之处。 Net.Commerce包中存在的一个问题使得远程攻击者可以发现Websphere的安装路径。通过直接 引用文件macro.d2w并跟以NOEXISTINGHTMLBLOCK的后缀，可使Webshpere返回Net.Commerce 软件的安装路径。 这使得远程用户可以搜集Web框架的布局，有助于入侵
CVSS Information
N/A
Vulnerability Type
N/A