Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ActivePython ActiveX控件默认安全策略不强壮漏洞
Vulnerability Description
ActiveState的ActivePython是一款Python脚本语言在Microsoft Windows平台上的实现,ActivePython也可用于Linux和Solaris系统上,windows下的ActivePython包含一个注册作为脚本语言处理的ActiveX控件,此控件允许嵌入到客户端来处理WEB页上的Python脚本。 ActivePython ActiveX控件没有修改关联到RExec类的默认权限,结果可导致嵌入到网页上的恶意脚本可以访问客户端文件和目录内容,可以导致攻击者可以获得系
CVSS Information
N/A
Vulnerability Type
N/A