Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the middle of a .. (dot dot) sequence in the parameters (1) _browser_out or (2) _out_file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AlienForm2远程目录遍历漏洞
Vulnerability Description
AlienForm2是一个用Perl写的邮件网关接口,目前由Jon Hedley维护。 AlienForm2存在目录遍历的漏洞,远程攻击者可以通过用字符串'.|.%2F'构建URL的文件路径随就能够访问主机上任意文件,潜在的还可能修改文件内容。
CVSS Information
N/A
Vulnerability Type
N/A