Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Working Resources BadBlue远程信息泄露漏洞
Vulnerability Description
BadBlue是一款由Woring Resources开发的P2P文件共享应用程序,可使用在Microsoft Windows操作系统下。 BadBlue默认的soinfo.php脚本会显示过多的敏感信息,远程攻击者可以利用这个漏洞获得例如数据库密码等敏感信息,可对系统进一步进行攻击。 如果BadBlue服务程序开启了PHP支持功能,攻击者请求BadBlue包含的soinfo.php脚本将会泄露很多系统敏感信息,因为soinfo.php脚本包含如下代码: -- soinfo.php -- <?php ph
CVSS Information
N/A
Vulnerability Type
N/A