Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file that is loaded by csSearch.cgi.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CSSearch远程命令执行漏洞
Vulnerability Description
csSearch是一款由perl实现的WEB站点搜索脚本，可以运行在Unix和Linux操作系统下，也可运行在Microsoft Windows操作系统平台下。 csSearch由于在对提交给csSearch.cgi脚本的参数没有充分过滤输入，可导致攻击者以httpd权限执行任意命令。 csSearch把配置数据作为perl代码存在"setup.cgi"文件上，由于访问验证错误，任意用户可以把配置数据提交给csSearch.cgi的变量中并写入到"setup.cgi"，因此导致perl代码以httpd进程
CVSS Information
N/A
Vulnerability Type
N/A