Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Savant Webserver远程受保护文件泄露漏洞
Vulnerability Description
Savant Webserver是一款运行在Win32下的开放源代码Web服务程序。 Savant Webserver对用户提交的输入缺少正确检查，远程攻击者以利用这个漏洞查看受口令保护的文件夹中任意文件内容。 Savant Web服务程序对用户提交的URL请求缺少正确充分的过滤，攻击者可以在文件名后增加' ' (%20)和'.' (%2e)字符就可以完全访问受口令保护的文件夹中的内容。
CVSS Information
N/A
Vulnerability Type
N/A