漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
MiniWeb <= Build 300 Arbitrary File Upload
漏洞信息
An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote attackers to upload arbitrary files to the server’s filesystem. By abusing the upload handler and crafting a traversal path, an attacker can place a malicious .exe in system32, followed by a .mof file in the WMI directory. This triggers execution of the payload with SYSTEM privileges via the Windows Management Instrumentation service. The exploit is only viable on Windows versions prior to Vista.
漏洞信息
N/A
漏洞
危险类型文件的不加限制上传
漏洞
MiniWeb HTTP server 安全漏洞
漏洞信息
MiniWeb HTTP server是stanleyhuang个人开发者的一个HTTP服务器。 MiniWeb HTTP server Build 300及之前版本存在安全漏洞,该漏洞源于文件上传处理不当,可能导致远程代码执行。
漏洞信息
N/A
漏洞
N/A