Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a large amount of data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DNS4Me远程拒绝服务及跨站脚本攻击漏洞
Vulnerability Description
DNS4Me是一款动态DNS服务系统,可使用域名关联动态IP。 DNS4Me存在多个安全问题,远程攻击者可以利用这些漏洞对系统进行拒绝服务及跨站脚本攻击。 跨站脚本攻击漏洞: 攻击者可以构建恶意URL连接,诱使用户访问, 可导致恶意代码在用户浏览器上执行,导致敏感信息泄露: http://127.0.0.1/?%3E%3Cscript%3Ealert('XSS')%3C/script%3E 拒绝服务攻击: 恶意用户可以发送超大数据到80端口,或DNS4Me Web服务程序运行的端口,可导致CPU使用率达到
CVSS Information
N/A
Vulnerability Type
N/A