Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
acccheck.pl in acccheck 0.2.1 allows Command Injection via shell metacharacters in a username or password file, as demonstrated by injection into an smbclient command line.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
acccheck 命令注入漏洞
Vulnerability Description
acccheck是一套在渗透测试中使用的密码暴力破解工具,它能够通过SMB协议进行Windows身份验证。 acccheck 0.2.1版本中的acccheck.pl文件存在命令注入漏洞,该漏洞源于程序缺少对用户输入的过滤。攻击者可借助用户名或密码文件中的shell元字符利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A