Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was later reported that 0.6.21 and earlier is also affected.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ADA IMGSVR远程目录遍历漏洞
Vulnerability Description
ADA Image是一个嵌入式WEB服务器主要对图片发布进行优化处理。 ADA Image没有充分过滤用户提供的URI数据,远程攻击者可以利用这个漏洞以WEB进程权限查看系统文件。 提交类似"%2f%2e%2e%2f"的数据,可绕过WEB ROOT限制,以WEB进程权限查看系统任意文件。
CVSS Information
N/A
Vulnerability Type
N/A