Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fname in flist.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
H-Sphere Webshell flist()远程缓冲区溢出漏洞
Vulnerability Description
Webshell是一款基于WEB的应用程序，可以作为文件管理器进行文件上传和下载处理，使用用户名/密码方式进行认证，以suid root属性运行。 Webshell使用的flist()函数存在缓冲区溢出，远程攻击者可以利用这个漏洞覆盖堆栈中数据，可能以root用户权限在系统上执行任意指令。 flist.c包含如下flist()函数： char fname[256]; int esize=strlen(ext); int fsize; if ((cdir=opendir(dname))!=NULL) { w
CVSS Information
N/A
Vulnerability Type
N/A