Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to list arbitrary directories via a .. (dot dot) in the nextpage parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NetGear DG632路由器WEB管理界面绕过认证漏洞
Vulnerability Description
NetGear DG632是美国网件(NetGear)公司的一个老款的家用ADSL路由器。 Netgear DG632路由器在80端口上运行了一个Web接口,允许管理员登录并管理设备的设置。到这个Web接口的认证是由/cgi-bin/中名为webcm的脚本处理的,该脚本根据用户的认证情况重新定向到相关页面。 webcm脚本处理用户认证并尝试通过以下javascript加载indextop.htm。indextop.htm页面要求执行HTTP基础认证。 --- <script language="javas
CVSS Information
N/A
Vulnerability Type
N/A