Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) .. (dot-dot) sequences in the page parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ION Script远程文件泄露漏洞
Vulnerability Description
ION(IDL on the Net)网络数据管理工具，在Internet 上共享IDL的可视化和分析功能，使不同层次的使用者将数据和可视化表示程序结合到网络－－客户应用中。 ION包含的ION Script系统对用户提交的HTTP请求检查不正确，远程攻击者可以利用这个漏洞以ION Script进程权限查看系统上任意文件内容。 ION Script系统的ion-p.exe脚本对'page'参数的数据缺少正确处理，攻击者可以提交任意已知文件名作为'page'参数值，可导致ion-p.exe脚本返回文件内容。
CVSS Information
N/A
Vulnerability Type
N/A