漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
LFI in /IDC_Logging/checkifdone.cgi, "file" parameter Allowing for File Existence Enumeration On IDC Satellite Receiver Web Management Interface Version 101
Vulnerability Description
A path traversal vulnerability exists in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web management portal version 101. An authenticated attacker can manipulate the `file` parameter to traverse directories and enumerate arbitrary files on the underlying filesystem. Due to the insecure perl file path handling function in use, a authenticated actor is able to preform directory traversal, with the backup endpoint confirming a file exists by indicating that a backup operation was successful or when using the path of a non existent file, the returned status is failed.
CVSS Information
N/A
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
International Datacasting SFX Series SuperFlex Satellite Receiver Web management interface 安全漏洞
Vulnerability Description
International Datacasting SFX Series SuperFlex Satellite Receiver Web management interface是美国International Datacasting公司的一个卫星接收设备的Web管理后台。 International Datacasting SFX Series SuperFlex Satellite Receiver Web management interface 101版本存在安全漏洞，该漏洞源于对文件/IDC_
CVSS Information
N/A
Vulnerability Type
N/A