Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Novell File Reporter NFRAgent.exe 路径遍历漏洞
Vulnerability Description
Novell File Reporter可提供现有文件信息、最后访问数据时间，文件的副本信息及文件位置等网络服务器上存储的无数文件信息并可规划存储空间。 Novell File Reporter 1.0.2版本的NFRAgent.exe中存在目录遍历漏洞。通过一个在FSFUI记录的FILE元素中带有‘..’的130 /FSF/CMD请求，远程攻击者可利用该漏洞上传并执行任意文件。
CVSS Information
N/A
Vulnerability Type
N/A