Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MNOGoSearch search.cgi ul变量远程缓冲区溢出漏洞
Vulnerability Description
mnoGoSearch是一款多功能的基于WEB的搜索引擎。 mnoGoSearch对用户提交的'ul'变量值缺少正确的边界缓冲区检查,远程攻击者可以利用这个漏洞进行缓冲区溢出攻击,可能以WEB进程权限在系统上执行任意指令。 'ul'变量用于指定搜索的URL值,攻击者提供超过5000字节的字符串作为'ul'变量,可覆盖堆栈中任意地址,精心构建提交数据可能以WEB权限在系统上执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A