Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary files via a metalink file containing directory traversal sequences in the name attribute of a file element.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Orbit Downloader目录遍历漏洞
Vulnerability Description
Orbit Downloader是用于从视频共享网站下载流媒体的下载管理器。 Orbit Downloader存在目录遍历漏洞,远程攻击者可以借助包含目录遍历序列的metalink文件(该文件在文件元素的name属性下)覆盖任意文件。
CVSS Information
N/A
Vulnerability Type
N/A