Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which allows remote attackers to bypass authentication via a filename with a .ats extension instead of a .hts extension.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BadBlue ISAPI extension绕过认证漏洞
Vulnerability Description
从BadBlue 1.7到 2.2版本，和可能之前版本的ISAPI extension执行安全检查后修改文件扩展名首两个字母。远程攻击者借助具有.ats扩展名而不是.hts扩展名绕过认证。
CVSS Information
N/A
Vulnerability Type
N/A