Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Easy File Sharing (EFS) Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of an HTTP GET request, which accesses the alternate data stream.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EFS Easy Address Book Web服务器数据参数多个跨站脚本攻击漏洞
Vulnerability Description
Easy File Sharing (EFS) Easy Address Book 1.2，当运行于NTFS文件系统上时，远程攻击者通过在一个HTTP GET请求尾部附加"::$DATA"，让系统访问替代的数据流，从而读取在web根目录下的任意文件。
CVSS Information
N/A
Vulnerability Type
N/A