Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi template editing function that can result in Possibility to create or modify files on the server filesystem. This attack appear to be exploitable via HTTP GET/POST request. This vulnerability appears to have been fixed in 6.2.32.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sympa 路径遍历漏洞
Vulnerability Description
Sympa是一套可拓展性强、高度自定义化的邮件列表软件。该软件提供多套模板、自定义身份鉴定后端和鉴定脚本，以及支持各种邮件列表后端（LDAP、SQL、文本、列表或者其它）。 Sympa 6.2.32之前版本中模板的编辑存在目录遍历漏洞。攻击者可通过发送HTTP GET/POST请求利用该漏洞在服务器文件系统上创建或修改文件。
CVSS Information
N/A
Vulnerability Type
N/A