Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
EasyCafe Server 2.2.14 Remote File Disclosure via Opcode 0x43
Vulnerability Description
A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers via TCP port 831. The server listens for a custom protocol where opcode 0x43 can be used to request arbitrary files by absolute path. If the file exists and is accessible, its content is returned without authentication. This flaw allows attackers to retrieve sensitive files such as system configuration, password files, or application data.
CVSS Information
N/A
Vulnerability Type
将资源暴露给错误范围
Vulnerability Title
Tinasoft EasyCafe Server 安全漏洞
Vulnerability Description
Tinasoft EasyCafe Server是越南Tinasoft公司的一款针对咖啡、网吧等的计费服务器端软件。 Tinasoft EasyCafe Server 2.2.14版本存在安全漏洞,该漏洞源于远程文件泄露,可能导致读取系统配置和密码文件等敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A