Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NEWLOG NetSupport Manager存在目录遍历漏洞
Vulnerability Description
NEWLOG NetSupport Manager是一款多功能网络操作程序，支持远程控制、文件传输，脚本自动管理、网络监视等功能。运行在多种操作系统平台下。 NEWLOG NetSupport Manager存在对用户输入过滤不充分问题，使攻击者可以远程以httpd进程的权限遍历主机上的目录，读取任意有权限读取的文件。 造成漏洞的原因在于NEWLOG NetSupport Manager的80端口服务没有对用户输入的数据进行有效的安全性检查，攻击者可以通过在变量中输入"../"这样的字符串来进行目录遍历。
CVSS Information
N/A
Vulnerability Type
N/A