Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathname in an error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Black Tie Project存在路径泄露漏洞
Vulnerability Description
Black Tie Porject (BTP)是一款基于PHP的系统构建程序，设计用来模块化构建系统，允许用户方便和可定制化的增加额外模块。BTP是一款法语项目。 Black Tie Porject (BTP)对不存在的页面请求处理不正确，可导致wwwroot目录路径泄露。 远程用户可以提交一个不存在的页面给Black Tie Porject (BTP)服务程序，使Black Tie Porject (BTP)返回错误信息并显示wwwroot目录的绝对路径。 此信息泄露可帮助攻击者进一步对系统进行攻击。
CVSS Information
N/A
Vulnerability Type
N/A