CNCVE编号：CNCVE-20010217 CVE编号：CAN-2001-0217 安全级别：中 漏洞中文描述： PALS Library System pals-cgi程序中的目录遍历漏洞允许远程攻击者通过documentName参数中的“..”来阅读任意文件。 漏洞英文描述： Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the documentName parameter. 漏洞参考： Reference: BUGTRAQ:20010212 PALS Library System "show files" Vulnerability and remote command execution Reference: URL:http://archives.neohapsis.com/archives/bugtraq/2001-02/0220.html Reference: BID:2372 Reference: URL:http://www.securityfocus.co 系统类型：其他 漏洞类型：输入有效性检查错误