Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Keene Digital Media Server 1.0.2 allows local users to obtain usernames and passwords by reading the dmscore.db file on the local system.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Keene Digital Media Server文件和密码泄露漏洞
Vulnerability Description
Keene Digital Media Server是一款基于WEB的共享照片，音乐和文件的服务程序。 Keene Digital Media Server不正确过滤用户提交的URI输入，远程攻击者可以利用这个漏洞以WEB进程权限查看文件内容，造成敏感信息泄露。 攻击者可以提交类似如下的请求造成目录遍历问题，以WEB权限查看文件内容： http://127.0.0.1:8080/dms/%2e%2e/ %2e%2e/dmscore.db 远程验证用户也可以通过输入如下URL执行管理功能： http://1
CVSS Information
N/A
Vulnerability Type
N/A