Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Uniong｜WebITR - Arbitrary File Reading through Path Traversal
Vulnerability Description
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
绝对路径遍历
Vulnerability Title
Uniong WebITR 安全漏洞
Vulnerability Description
Uniong WebITR是中国凯发（Uniong）公司的一款在线考勤系统。 Uniong WebITR存在安全漏洞，该漏洞源于容易受到绝对路径遍历攻击，可能导致远程攻击者下载任意系统文件。
CVSS Information
N/A
Vulnerability Type
N/A