Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which could allow local users (and possibly remote attackers) to gain privileges by stealing the file before it has been processed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CGIScript.net csPassword.CGI Password.CGI.TMP文件泄露漏洞
Vulnerability Description
CGIScript.net是由Mike Barone和Andy Angrick维护的WEB管理员相关的工具。 CGIScript.net中的csPassword.cgi脚本存在漏洞，可导致远程攻击者获得系统应用相关的敏感信息如用户名和密码。 当程序保存删除其数据文件时，csPassword.cgi脚本会建立一包含所有用户名和未加密密码的"password.cgi.tmp"文件，根据系统设置，此文件一般是全局可读并可以在程序改名前远程下载，攻击者可以通过获得此文件内容进一步对系统进行攻击。
CVSS Information
N/A
Vulnerability Type
N/A