Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
JAG (Just Another Guestbook) 1.14 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for jag/database.sql.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xs4All JAG web根目录敏感信息泄露漏洞
Vulnerability Description
JAG (Just Another Guestbook)将敏感信息泄露存储在web根目录下，并且没有足够的访问控制，远程攻击者可以利用访问jag/database.sql文件，获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A