| 제목 | Nanchang Lanzhi Technology Co., LTD ujcms 9.0.5 Sensitive information disclosure |
|---|
| 설명 | Nanchang Lanzhi Technology Co., LTD view:https://www.ujcms.com/ source:https://gitee.com/ujcms/ujcms
In the background file - HTML file, sensitive information is leaked in the zip file download function. An attacker can download the WEB-INF file of webapp by modifying the name parameter |
|---|
| 원천 | ⚠️ https://github.com/sweatxi/BugHub/blob/main/ujcms_information_disclosure.pdf |
|---|
| 사용자 | hexixi (UID 59932) |
|---|
| 제출 | 2024. 03. 20. PM 02:16 (3 연령 ago) |
|---|
| 모더레이션 | 2024. 03. 21. AM 02:36 (12 hours later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 231502 [UJCMS 까지 6.0.2 ZIP Package dir 정보 공개] |
|---|
| 포인트들 | 0 |
|---|