Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Shanxi Diankeyun Technology NODERP log file access
Vulnerability Description
A vulnerability has been found in Shanxi Diankeyun Technology NODERP up to 6.0.2 and classified as critical. This vulnerability affects unknown code of the file /runtime/log. The manipulation leads to files or directories accessible. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-252274 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
对外部实体的文件或目录可访问
Vulnerability Title
Shanxi Diankeyun Technology NODERP 安全漏洞
Vulnerability Description
Shanxi Diankeyun Technology NODERP是点可云（Shanxi Diankeyun Technology）公司的一个ERP系统。 Shanxi Diankeyun Technology NODERP 6.0.2 版本存在安全漏洞，该漏洞源于文件 /runtime/log 存在问题，该问题可能导致文件或目录可访问。
CVSS Information
N/A
Vulnerability Type
N/A