Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP AN HTTP任意日志内容注入漏洞
Vulnerability Description
AN HTTPD Server是一款Windows 95/98/Me/NT/2000/XP平台下的web服务程序。 AN HTTPD中的输入验证错误可能允许远程攻击者向日志文件中注入任意内容，导致隐藏攻击和/或误导管理员。 特别是在记录请求前AN HTTPD没有过滤掉URI中的CR和LF字符，这样攻击者就可能破坏日志文件或注入假的条目。攻击者还可以向日志文件中注入cmdIS.DLL插件可执行的命令。
CVSS Information
N/A
Vulnerability Type
N/A