Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2004-2170

EPSS 7.10% · P92
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2004-2170

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Directory traversal vulnerability in sample_showcode.html in Caravan 2.00/03d and earlier allows remote attackers to read arbitrary files via the fname parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Niti Telecom Caravan Business Server远程目录遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Niti Telecom Caravan Business Server是一款基于WEB的服务程序。 Niti Telecom Caravan Business Server包含的showcode.asp脚本对用户提交的请求缺少充分过滤，远程攻击者可以利用这个漏洞以WEB权限查看系统文件。 使用包含多个'../'的转义字符作为参数提交给showcode.asp脚本，可绕过WEB ROOT目录限制，以WEB进程权限查看系统文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2004-2170

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2004-2170

请登录查看更多情报信息。

Same Patch Batch · n/a · 2005-07-10 · 75 CVEs total

CVE-2004-2203Federico David Sacerdoti Ansel不安全默认权限漏洞
CVE-2005-2187McAfee IntruShieldSecurityManagementSystem 获取访问权限漏洞
CVE-2004-2211AliveSites Forum多个未明远程输入验证漏洞
CVE-2004-2210Express-Web Content Management System未明跨站脚本漏洞
CVE-2004-2209Ideal Science IdealBB多个未明的远程输入验证漏洞
CVE-2004-2208Ideal Science IdealBB多个未明远程输入验证漏洞
CVE-2004-2207Ideal Science IdealBB多个未明远程输入验证漏洞
CVE-2004-2206NatterChat未明SQL注入漏洞
CVE-2004-2205Veritas Cluster Server远程root用户访问漏洞
CVE-2004-2204Macromedia ColdFusion MX CreateObject和Java Extensibility过弱漏洞
CVE-2004-2212AliveSites Forum多个未明远程输入验证漏洞
CVE-2004-2202DUware Software多个溢出漏洞
CVE-2004-2201Duware软件多个远程漏洞
CVE-2004-2200DUware Software多个远程漏洞
CVE-2004-2199Duware软件多个远程漏洞
CVE-2004-2198DUware Software多个远程漏洞
CVE-2004-2197KDocker未明漏洞
CVE-2004-2196Zanfi CMS lite 1.1版本漏洞
CVE-2004-2195Zanfi CMS Lite远程文件包含漏洞
CVE-2004-2194MailEnable多个远程服务拒绝漏洞

Showing top 20 of 75 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2004-2170

No comments yet

Leave a comment