Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Lysias Lidik Web服务器目录遍历漏洞
Vulnerability Description
Lysias Lidik Webserver是一款可以构建在Microsoft Windows操作系统下的WEB服务程序,支持SSL实现。 Lysias Lidik Web服务器对用户输入提交的URL数据缺少正确充分的检查,可导致远程攻击者进行目录遍历攻击。 攻击者可以向Lysias Lidik Web服务器提交包含多个'/'和'.'字符相结合的URL请求,导致攻击者可能以WEB进程的权限在系统上查看任意文件内容。 通过获得系统敏感信息,可以进一步对系统进行攻击。
CVSS Information
N/A
Vulnerability Type
N/A