Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Gafware CFXImage ShowTemp文件目录遍历漏洞
Vulnerability Description
CFXImage是一款可定制ColdFusion标识用于编辑和建立图象。 CFXImage包含的showtemp.cfm脚本对用户提交的数据缺少正确充分的过滤，可导致远程攻击者以CFXImage进程的权限查看系统上任意文件内容。 攻击者可以提交包含多个'../'字符的系统文件名请求给showtemp.cfm，由于showtemp.cfm对提交的数据缺少正确过滤，可导致产生目录遍历攻击，并以CFXImage进程的权限查看Web主目录外的任意文件内容。
CVSS Information
N/A
Vulnerability Type
N/A