Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SPON IP Network Intercom System rj_get_token.php Arbitrary File Read
Vulnerability Description
SPON IP Network Broadcast System, a digital audio transmission platform developed by SPON Communications, contains an arbitrary file read vulnerability in the rj_get_token.php endpoint. The flaw arises from insufficient input validation on the jsondata[url] parameter, which allows attackers to perform directory traversal and access sensitive files on the server. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted POST request to read arbitrary files, potentially exposing system configuration, credentials, or internal logic. An affected version range is undefined.
CVSS Information
N/A
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
SPON IP Network Broadcast System 安全漏洞
Vulnerability Description
SPON IP Network Broadcast System是中国世邦（SPON）公司的一种基于IP网络的纯数字广播系统。 SPON IP Network Broadcast System存在安全漏洞，该漏洞源于输入验证不足，可能导致任意文件读取。
CVSS Information
N/A
Vulnerability Type
N/A