Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Railo 输入验证错误漏洞
Vulnerability Description
Railo是瑞士Railo公司的一套实现了通用CFML服务器端脚本语言（一种程序设计语言）的开源软件。该软件用于创建动态网站、Web应用程序和网络系统。 Railo 4.2.1及之前版本中存在输入验证错误漏洞。攻击者可通过发送特制URL请求到thumbnail.cfm利用该漏洞获取敏感信息或执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A