Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
faqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by specifying the filename in the toc parameter with a trailing null character (%00).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Faqmanager.cgi NULL字符泄露任意文件漏洞
Vulnerability Description
faqmanager.cgi是一个通过Web界面维护FAQ的Perl脚本。它可以运行在大多数UNIX/Linux、Windows等支持Perl解释器的平台下。 faqmanager.cgi存在输入验证漏洞，可以攻击者遍历主机驱动器上的目录，读取任意有权限读取的文件。 问题在于faqmanager.cgi在打开文件时对用户输入未作充分过滤，攻击者通过构造特殊的文件名输入，可以导致脚本打开攻击者指定的任意httpd进程有权限读取的系统文件。
CVSS Information
N/A
Vulnerability Type
N/A