Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and read restricted files via an extra / (slash) in the requested URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BlueFace Falcon Web Server绕过认证漏洞
Vulnerability Description
Falcon Web Server是一个Windows系统下小型,高效的Web服务器程序。它被设计使用在小流量的桌面机器上。 Falcon程序实现上存在漏洞,可以使远程攻击者绕过服务器对用户访问的验证。 Falcon支持目录映射功能,用户访问需要得到主机的验证。远程攻击者可以在HTTP请求中,在要访问的受保护目录之前加上一个"/"字符,绕过服务器程序对其的验证。在低版本的Falcon软件中可能也有此漏洞。
CVSS Information
N/A
Vulnerability Type
N/A