Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the f parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Etomite manager/index.php 目录遍历漏洞
Vulnerability Description
Etomite中的manager/index.php存在目录遍历漏洞，远程认证用户可以通过在f参数中的一个.. (点点)来包含并执行任意本地文件，如注入PHP序列到一个Apache HTTP服务器日志文件，此后它又被index.php所包含。
CVSS Information
N/A
Vulnerability Type
N/A