Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
HTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage details by using an id element such as <id>%version%</id> in HTTP Basic Authentication instead of a username and password, as demonstrated by placing this id element in the userinfo subcomponent of a URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HFS HTTP File Server HTTP基本验证漏洞
Vulnerability Description
HTTP File Server是一款专为个人用户所设计的HTTP文件服务器，它提供虚拟档案系统，支持新增、移除虚拟档案资料夹等。 远程攻击者可以通过向服务器提交包含有模板符号的特制请求导致泄露某些信息，如连接数、传输速度、通讯统计或运行时间等。
CVSS Information
N/A
Vulnerability Type
N/A