Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Hosting Controller DSNManger目录遍历漏洞
Vulnerability Description
Hosting Controller是一款以一接口集中管理大量主机任务的应用程序，可运行在Microsoft Windows操作系统下。 Hosting Controller中的DSNManager.asp脚本没有正确过滤用户提交给URL参数的数据，可导致远程攻击者进行目录遍历攻击。 造成漏洞的原因在于脚本没有对用户输入的数据进行有效的安全性检查，攻击者可以通过向dsnmanager.asp脚本中的DSNAction=ChangeRoot&RootName=变量中输入多个包含"../"这样的字符串来进行目
CVSS Information
N/A
Vulnerability Type
N/A