Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ventrian News-Articles version NewsArticles.00.09.11 contains a XML External Entity (XXE) vulnerability in News-Articles/API/MetaWebLog/Handler.ashx.vb that can result in Attacker can read any file in the server or use smbrelay attack to access to server..
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ventrian News-Articles 安全漏洞
Vulnerability Description
ventrian News-Articles是一套用于发布、管理新闻的后台系统。 ventrian News-Articles 00.09.11版本中的News-Articles/API/MetaWebLog/Handler.ashx.vb文件存在XML外部实体注入漏洞。攻击者可利用该漏洞读取服务器上任意的文件或实施SMBRelay攻击，访问服务器。
CVSS Information
N/A
Vulnerability Type
N/A