Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Last Lines CGI脚本目录遍历漏洞
Vulnerability Description
Last Lines CGI是一个免费的脚本，用Perl实现，由Matrix's CGI Vault维护。它可以使用户打印出Web日志文件尾部中某些指定的行。 Lastlines.cgi存在输入验证漏洞，远程攻击者可以利用这个漏洞遍历主机的目录读取任意有权限读取的文件。 问题代码： # $unixdir="path/here"; # $error_log是用户输入的值 open(FILE， "$unix_dir/$error_log"
CVSS Information
N/A
Vulnerability Type
N/A