Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Last Lines CGI脚本执行任意命令漏洞
Vulnerability Description
Last Lines CGI是一个免费的脚本，用Perl实现，由Matrix's CGI Vault维护。它可以使用户打印出Web日志文件尾部中某些指定的行。 Lastlines.cgi存在输入验证漏洞，可以使远程攻击者以httpd进程的权限在主机上执行任意命令。 问题代码： # $unixdir="path/here"; # $error_log是用户输入的值 open(FILE， "$unix_dir/$error_log"
CVSS Information
N/A
Vulnerability Type
N/A