Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read arbitrary files via a base64-encoded absolute path in the filename parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Rapid Leech upload.php绝对路径遍历漏洞
Vulnerability Description
Rapid Leech是很多站点都在使用的免费服务器端文件传输脚本。 Rapidleech没有对下载文件的路径执行检查，包含有base64编码绝对路径的文件路径可能指向服务器上的任意文件，因此远程攻击者可以通过GET方式提交恶意filename参数访问服务器上的任意文件，如/etc/passwd。
CVSS Information
N/A
Vulnerability Type
N/A