Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files (even though limited to the mentioned extension) can lead to Remote Code Execution. This can occur via /device/device=345/?tab=routing&proto=../ URIs to device/routing.inc.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Observium Professional Enterprise Community 安全漏洞
Vulnerability Description
Observium是英国observium的一个免费的服务器监控平台。该平台由PHP编写的基于自动发现 SNMP 的网络监控平台，支持非常广泛的网络硬件和操作系统，包括 Cisco、Windows、Linux、HP、NetApp 等等。 Observium Professional, Enterprise & Community 20.8.10631版本中存在安全漏洞，该漏洞源于存在无限限制地加载具有inc.php扩展名的文件的事实，该漏洞允许攻击者进行目录遍历和本地文件攻击。
CVSS Information
N/A
Vulnerability Type
N/A