Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CGIScript.net csPassword.CGI htpasswd文件泄露漏洞
Vulnerability Description
CGIScript.net是由Mike Barone和Andy Angrick维护的WEB管理员相关的工具。 CGIScript.net中的csPassword.cgi脚本存在漏洞，可导致远程攻击者访问脚本产生的.htpasswd文件。 由于.htpasswd文件生成在同.htaccess文件相同的文件夹中，可导致拥有保护目录访问密码的用户下载.htpasswd文件，造成敏感信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A