Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the Path parameter to the MapPath method.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun Java ASP服务器 HTTP请求目录遍历漏洞
Vulnerability Description
Sun Java System Active Server Pages软件允许组织在各种web服务器和操作系统上部署基于ASP的web应用。 ASP 服务 4.0.3 之前的版本中的输入验证错误可能允许攻击者通过特制的HTTP请求执行目录遍历攻击，导致泄露任意文件内容或删除任意文件。成功利用这个漏洞要求能够网络访问管理服务器(5100/TCP端口)。
CVSS Information
N/A
Vulnerability Type
N/A