Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read arbitrary files via a full pathname in the AnalyseSite parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EZ Systems HTTPBench远程文件泄露漏洞
Vulnerability Description
EZ httpbench是一款简单的由PHP编写的评测程序，它可以获取WEB页并对时间进行评测，衡量统计。 ezhttpbench.php脚本对用户提交的输入缺少充分检查，远程攻击者可以利用这个漏洞可以以WEB权限查看系统任意文件内容。 ezhttpbench.php脚本的AnalyseSite参数的内容检查不充分，攻击者可以提交任意系统文件作为此参数内容，而导致文件内容泄露给攻击者，利用这些敏感信息可以对系统进一步进行攻击。
CVSS Information
N/A
Vulnerability Type
N/A