Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a request with an invalid cfg parameter, which generates an error message that reveals the path.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MRTG CGI泄露Web目录绝对路径漏洞
Vulnerability Description
多路由器流量图示(Multi Router Traffic Grapher)是一个监视网络节点上流量的软件。MRTG生成包含GIF动画的HTML页面来表示出一个当时网络流量的图示。 MRTG CGI程序实现上存在问题，远程攻击者可能利用此漏洞得知主机的Web目录的绝对路径。 当提交一个包含非法字符的HTTP请求给mrtg.cgi程序时，服务器程序会出错并返回一个出错页面，在页面中会显示Web目录在服务器上的绝对路径。
CVSS Information
N/A
Vulnerability Type
N/A