Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
eFileMan 7.1.0.87-88 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain unspecified user information via a direct request for cgi-bin/efileman/efileman_config.pm.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
efileman 'efileman_config.pm' 文件上传和访问验证漏洞
Vulnerability Description
eFileMan 7.1.0.87-88 在网根储存敏感信息但没有赋予足够的访问控制, 允许远程攻击者可以借助对cgi-bin/efileman/efileman_config.pm提交一个直接请求,获得未明用户信息。
CVSS Information
N/A
Vulnerability Type
N/A