Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
C.J. Steele Tattle getemails函数 任意指令执行漏洞
Vulnerability Description
C.J. Steele Tattle中的getemails函数存在安全漏洞,远程攻击者可借助特定日志条目中的shell元字符执行任意命令,比如使用FTP用户名中的shell元字符。C.J. Steele Tattle中的getemails函数存在安全漏洞,远程攻击者可借助特定日志条目中的shell元字符执行任意指令,比如使用FTP用户名中的shell元字符。
CVSS Information
N/A
Vulnerability Type
N/A