Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is processed in the NEEDS command, or (2) an HTTP Referrer that is processed in the VALID_PATHS command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Vignette NEEDS命令TCL代码注入漏洞
Vulnerability Description
Vignette StoryServer 版本5和Vignette 版本V/6存在漏洞。远程攻击者可以借助(1)NEEDS命令处理的HTTP查询或cookie,或(2)VALID_PATHS命令处理的HTTP Referrer执行任意TCL代码。
CVSS Information
N/A
Vulnerability Type
N/A