Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
W-Agora (Web-Agora) 4.2.1, when register_globals is enabled, stores globals.inc under the web document root with insufficient access control, which allows remote attackers to obtain application path information via a direct request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
W-Agora (Web-Agora) globals.inc 信息泄露漏洞
Vulnerability Description
当register_globals被启用时,W-Agora (Web-Agora) 4.2.1版本会在web文档下储存globals.inc而未赋予足够的访问控制,这使得远程攻击者可以借助一个直接请求,获得应用程序路径信息。
CVSS Information
N/A
Vulnerability Type
N/A