Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Uniong｜WebITR - Arbitrary File Read
Vulnerability Description
WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
相对路径遍历
Vulnerability Title
Uniong WebITR 安全漏洞
Vulnerability Description
Uniong WebITR是中国凯发（Uniong）公司的一款在线考勤系统。 Uniong WebITR存在安全漏洞，该漏洞源于相对路径遍历，允许远程攻击者下载任意系统文件。
CVSS Information
N/A
Vulnerability Type
N/A