Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Agora.CGI调试模式下绝对路径泄漏漏洞
Vulnerability Description
Agora.cgi是种免费使用、开放源码的电子购物系统。 Agora.cgi实现上存在漏洞,远程攻击者可以利用这个漏洞收集远程主机敏感信息,为以后的其它攻击做准备。 当其调试模式打开时,远程攻击者针对一个不存在的.html文件提交URL请求,导致agora.cgi脚本所在目录的绝对路径被显示出来。
CVSS Information
N/A
Vulnerability Type
N/A