CVE-2021-41773

Apache 2.4.49CVE-2021-41773 및 2.4.50CVE-2021-42013 모두에 대한 RCE 익스플로잇: 제 생각에는 이 RCE에 취약한 것은 '특별한' 설정뿐입니다. 당신이 본 '임의 파일 읽기' 익스플로잇도 마찬가지입니다. 두 CVE는 실제로 거의 동일한 경로 탐색 취약점입니다두 번째 것은 첫 번째 것에 대한 불완전한 수정입니다. 경로 탐색은 매핑된 URI예: Apache 지시문 "Alias" 또는 "ScriptAlias"를 통해에서만 작동합니다. DocumentRoot만으로는 충분하지 않습니다...

CVE-2013-4878

The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes it easier for remote attackers to execute arbitrary code via a crafted request, a different vulnerability than...

Default configuration

The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes it easier for remote attackers to execute arbitrary code via a crafted request, a different vulnerability than...

CVE-2013-4878

CVE-2013-4878 affects Parallels Plesk Panel 9.0.x–9.2.x on UNIX and Small Business Panel 10.x on UNIX, due to an improper ScriptAlias directive for phppath that enables remote code execution via crafted requests. Affected versions expose code execution under the web server user; exploitation reli...

CVE-2013-4878

The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes it easier for remote attackers to execute arbitrary code via a crafted request, a different vulnerability than...

CVE-2006-4110

Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase or alternate case characters that bypass the case-sensitive ScriptAlias directive, but allow access to the file on case-insensitive file systems...