Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows remote attackers to read arbitrary files via a query string containing a .. (dot dot) in the image variable, and execute arbitrary files via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TWiki /bin/configure脚本文件泄露漏洞
Vulnerability Description
TWiki是一款灵活易用、功能强大的企业协作平台和知识管理系统。 TWiki软件没有正确地验证某些URL输入，如果访问了包含有TWiki配置脚本的URL的话，攻击者就可以读取任意文件。 以下是/bin/configure脚本中的有漏洞代码： if( $action eq 'image' ) { # SMELL: this call is correct, but causes a perl error # on some versions of CGI.pm # print $query->header(
CVSS Information
N/A
Vulnerability Type
N/A