漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Limbo CMS 1.0.4.2 and earlier allows remote attackers to obtain the installation path of the application via a direct request to (1) doc.inc.php, (2) element.inc.php, and (3) node.inc.php, which leaks the path in an error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Limbo CMS 安装路径泄露漏洞
Vulnerability Description
远程攻击者可以借助Limbo CMS 1.0.4.2及更早版本,通过对(1) doc.inc.php、(2) element.inc.php和(3) node.inc.php的直接请求造成在错误信息中泄露路径,从而获得应用程序的安装路径。
CVSS Information
N/A
Vulnerability Type
N/A