Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the ROCK_LANG cookie, as demonstrated in a login.index action to index.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RockMongo 目录遍历漏洞
Vulnerability Description
RockMongo是RockMongo团队开发的一套基于PHP5的MongoDB（数据库）管理工具。 RockMongo 1.1.5及之前的版本中存在目录遍历漏洞。远程攻击者可借助ROCK_LANG cookie中的目录遍历字符（‘..’）利用该漏洞读取任意文件。
CVSS Information
N/A
Vulnerability Type
N/A