Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jbmc-Software DirectAdmin任意临时目录文件不安全临时文件创建漏洞
Vulnerability Description
DirectAdmin是一个图形化的以WEB为基础的虚拟主机控制台。 JBMC Software DirectAdmin 1.334版本之前的版本允许本地用户可以借助对的任意某个临时目录中的文件的一个symlink攻击，创建或重写任意文件，且它与一个备份操作中对CMD_DB脚本的PATH_INFO的临时文件的一个请求相关。
CVSS Information
N/A
Vulnerability Type
N/A