Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to obtain the source code for file under the web root via the file parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Caucho Resin 某CGI程序 输入验证漏洞
Vulnerability Description
Resin是一款由Caucho Technology开发的WEB服务器，可使用在Microsoft Windos操作系统下。 Resin的某个CGI程序实现上存在输入验证漏洞，远程攻击者可能利用此漏洞读取Web主目录下的任意文件，包括JSP源码或类文件。 默认下Resin的/webapps目录下/resin-doc中包含有一个扩展war文件。该文档包含有用于在集成的手册中浏览文件的servlet： http://targetsystem/resin-doc/viewfile/?contextpath=%2
CVSS Information
N/A
Vulnerability Type
N/A