Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in magiccard.cgi in My Postcards Platinum 5.0 and 6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
My Postcards MagicCard.CGI远程文件泄露漏洞
Vulnerability Description
My Postcards是一款商业电子贺卡系统，可使用在多种Unix和Linux操作系统下。 My Postcards中的magiccard.cgi脚本处理用户输入时缺少正确检查，远程攻击者可以利用这个漏洞进行目录遍历攻击。 magiccard.cgi脚本page参数对用户提交的数据缺少过滤，远程攻击者可以提交包含多个'../'字符并追加系统文件名的请求，而导致以WEB进程权限查看目标系统上任意文件内容，造成敏感信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A