Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded \.. (backslash .., "%5c%2e%2e") sequences in an HTTP request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Accipiter DirectServer远程文件泄露漏洞
Vulnerability Description
Accipiter Direct Server是一款广告处理和标帜广告跟踪程序。 Accipiter Direct Server对用户提交的URI数据缺少充分过滤，远程攻击者可以利用这个漏洞以WEB权限在系统上查看任意文件内容。 Accipiter Direct Server作为HTTP服务程序监听用户请求，如果提交特殊编码的URL数据，可绕过WEB ROOT限制，以WEB进程权限在系统上查看任意文件内容。
CVSS Information
N/A
Vulnerability Type
N/A