Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
UnForm Server Manager < 10.1.12 Unauthenticated Arbitrary File Read
Vulnerability Description
UnForm Server Manager versions prior to 10.1.12 expose an unauthenticated file read vulnerability via its log file analysis interface. The flaw resides in the arc endpoint, which accepts a fl parameter to specify the log file to be opened. Due to insufficient input validation and lack of path sanitization, attackers can supply relative paths to access arbitrary files on the host system — including sensitive OS-level files — without authentication.
CVSS Information
N/A
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
Synergetic Data Systems UnForm Server Manager 安全漏洞
Vulnerability Description
Synergetic Data Systems UnForm Server Manager是美国Synergetic Data Systems公司的一个基于浏览器的管理工具。 Synergetic Data Systems UnForm Server Manager 10.1.12之前版本存在安全漏洞，该漏洞源于日志文件分析接口输入验证不足，可能导致任意文件读取。
CVSS Information
N/A
Vulnerability Type
N/A