Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in Perl-HTTPd before 1.0.2 allows remote attackers to view arbitrary files via a .. (dot dot) in an unknown argument.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Perl-HTTPd远程目录遍历漏洞
Vulnerability Description
Perl-HTTPd是一款由PERL编写的简易的WEB服务程序。 Perl-HTTPd没有正确过滤部分恶意WEB请求，远程攻击者可以利用这个漏洞以WEB权限在系统上查看任意文件信息。 由于Perl-HTTPd对'../'字符缺少正确过滤，远程攻击者可以提交多个包含'../'字符的WEB请求，可绕过HTTP ROOT目录限制，以WEB进程权限在系统上查看任意文件，造成信息泄露，利用这些信息可以进一步对系统进行攻击。
CVSS Information
N/A
Vulnerability Type
N/A