Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LocalWEB2000远程文件泄露漏洞
Vulnerability Description
LocalWEB2000是一款适合个人用户的Web服务器程序,可使用在Windows操作系统下。 LocalWEB2000在文件保护机制实现中存在漏洞,可导致远程攻击者绕过保护访问文件内容。 LocalWEB2000存在文件保护功能,不过由于设计错误,攻击者可以提交包含'./'并追加相应要查看文件名的URL来绕过文件保护功能,造成敏感信息泄露。 此漏洞测试于LocalWEB2000 Standard Version 2.1.0,其他版本也可能存在此漏洞。
CVSS Information
N/A
Vulnerability Type
N/A