Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHPNetToolpack 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the a_query variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPNetToolpack远程命令执行漏洞
Vulnerability Description
PHPNetToolpack是一款由PHP实现在WEB接口下提供finger、whois、traceroute功能的程序,可以运行在Unix和Linux操作系统下,也可运行在Microsoft Windows操作系统平台下。 PHPNetToolpack由于在执行traceroute程序时没有充分过滤用户输入,可导致远程攻击者以httpd权限执行任意命令。 由于PHPNetToolpack使用如下代码: exec("traceroute $a_query",$ret_strs); 调用traceroute
CVSS Information
N/A
Vulnerability Type
N/A