Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-Alone Module) 1.1.08 and earlier allows remote attackers to cause a denial of service (CPU consumption) or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error message when PHP safe_mode is enabled, or consumes resources when safe_mode is not enabled.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Big Sam Webroot路径泄露漏洞
Vulnerability Description
Big Sam是一款基于PHP语言实现的留言版程序，可以运行在Unix和Linux操作系统下，也可运行在Microsoft Windows操作系统平台下。 Big Sam由于对传递给脚本的参数处理存在问题可导致webroot绝对路径泄露。 攻击者可以对Big Sam系统中的bigsam_guestbook.php脚本参数displayBegin提交包含过多字符的变量，可导致Webroot相关绝对路径泄露给攻击者。 攻击者可以通过这些信息，对目标系统进行进一步的攻击。
CVSS Information
N/A
Vulnerability Type
N/A