Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv~1.zip name (aka an 8.3 filename).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BlogoText 信息泄露漏洞
Vulnerability Description
BlogoText是一款轻量级的SQLite博客引擎。 BlogoText 3.7.6及之前的版本中的admin/maintenance.php文件的‘creer_fichier_zip’函数存在信息泄露漏洞。远程攻击者可通过提供archiv~1.zip名称利用该漏洞破坏文件名随机保护机制，读取Windows服务器上的备份归档文件。
CVSS Information
N/A
Vulnerability Type
N/A