Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The mod_perl initialization script in Bugzilla 2.23.3 does not set the Bugzilla Apache configuration to allow .htaccess permissions to override file permissions, which allows remote attackers to obtain the database username and password via a direct request for the localconfig file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Bugzilla HTML mod_perl注入及信息泄露漏洞
Vulnerability Description
Bugzilla是很多软件项目都在使用的基于Web的bug跟踪系统。 Mozilla Bugzilla所捆绑的mod_perl初始化脚本在包含有Bugzilla目录的Apache配置中定义了新的<Directory>块。该块导致.htaccess无法运行，这样攻击者可以通过浏览器读取包含有连接到数据库服务器所使用用户名和口令的localconfig文件。
CVSS Information
N/A
Vulnerability Type
N/A