CNCVE编号：CNCVE-20010561 CVE编号：CAN-2001-0561 安全级别：中 漏洞中文描述： Drummond Miles A1Stats早期到1.6版本中的目录遍历漏洞允许远程攻击者通过在(1)aldisp.cgi、(2)ldisp3.cgi或(3)aldisp4.cgi中使用“..”攻击来阅读任意文件。 漏洞英文描述： Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in (1) a1disp2.cgi, (2) 1disp3.cgi, or (3) a1disp4.cgi. 漏洞参考： Reference: BUGTRAQ:20010507 Advisory for A1Stats Reference: URL:http://archives.neohapsis.com/archives/bugtraq/2001-05/0047.html Reference: BID:2705 Reference: URL:http://www.securityfocus.com/bid/2705 Reference: XF:a1stats-dot-directory-traversal(6 系统类型：其他 漏洞类型：输入有效性检查错误