Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) CompactSave and (2) SaveSession method in one control, and the (3) saveRecordedExploreToFile method in a different control. NOTE: this can be leveraged for code execution by writing to a Startup folder.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Watchfire AppScan ActiveX 控件 路径遍历漏洞
Vulnerability Description
WatchFire AppScan 7.0的某个ActiveX控件中存在多个完全路径游历漏洞。远程攻击者通过向(1) CompactSave 和 (2)一个控件中的SaveSession 方法函数, 以及 (3) 一个不同控件中的saveRecordedExploreToFile路径函数发射变量中的一个完整路径名，来写满任意文件。 注意：该漏洞可以通过对Startup文件夹的写入扩大为执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A