Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the pg parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tatantella ttawebtop.cgi远程目录遍历漏洞
Vulnerability Description
Tarantella Enterprise 3是一个数据和应用程序集中管理工具,提供Web管理接口,可以运行于大多数Unix和Linux平台。 Tarantella包含的一个CGI脚本ttawebtop.cgi,远程攻击者可以利用此漏洞遍历服务器的目录。 由于没有对"../"进行过滤,导致远程攻击者通过提交一个特殊请求遍历服务器目录或读取任意文件。
CVSS Information
N/A
Vulnerability Type
N/A