Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
DataTrack System 3.5 allows remote attackers to bypass intended restrictions on file extensions, and read arbitrary files, via a trailing backslash in a URI, as demonstrated by (1) web.config\ and (2) .ascx\ files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Magnoware DataTrack System 远程安全漏洞
Vulnerability Description
DataTrack System 3.5存在安全漏洞。远程攻击者可以借助URL中的被拖动的反斜杠绕过预设的安全限制，读取任意文件。在(1) web.config\ 和 (2) .ascx\ files中已经被证实。
CVSS Information
N/A
Vulnerability Type
N/A