REMLAB Web Mech Designer 路径泄露漏洞

漏洞信息详情

REMLAB Web Mech Designer远程攻击者通过一个传给calculate.php的不正确的Tonnage参数来触发被除数为零的错误，导致系统在出错消息内泄露路径，从而获取脚本的完整路径。

来源: FULLDISC

名称: 20061127 REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability

链接:http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050879.html

来源: XF

名称: remlab-calculate-path-disclosure(30538)

链接:http://xforce.iss.net/xforce/xfdb/30538

来源: BUGTRAQ

名称: 20061127 REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability

链接:http://www.securityfocus.com/archive/1/archive/1/453020/100/0/threaded

来源: OSVDB

名称: 30264

链接:http://www.osvdb.org/30264

来源: SREASON

名称: 1911

链接:http://securityreason.com/securityalert/1911

来源: MISC

链接:http://netvigilance.com/advisory0007

暂无