Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WebCalendar 0.9.34 and earlier with 'browsing in includes directory' enabled allows remote attackers to read arbitrary include files with .inc extensions from the web root.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WebCalendar远程文件信息泄露漏洞
Vulnerability Description
WebCalendar是一款PHP编写的基于WEB的日历程序，可单人或者多人进行日历维护，可运行在多种Unix和Linux操作系统下。 WebCalendar存在'.inc'扩展文件，可导致远程攻击者通过请求此类文件获得系统敏感信息。 WebCalendar默认安装后，在web root目录中会包含以'.inc'为扩展名的文件，此类文件包含系统敏感信息，由于这些文件没有通过PHP解析器处理，可导致攻击者直接请求此类文件而获得系统应用相关的敏感信息，攻击者可以通过这些信息进一步对系统进行攻击。 <**>
CVSS Information
N/A
Vulnerability Type
N/A