CVE:CVE-2017-16110
CNNVD:CNNVD-201806-526
weather.swlyons是一个Web服务器。
weather.swlyons中存在目录遍历漏洞。攻击者可通过在URL中放置‘../’序列利用该漏洞获取文件系统的访问权限。
solution:Upgrade weather.swlyons_project weather.swlyons to a higher version than 0.1.1,0.1.2,0.1.3,0.1.4,0.1.5,0.1.6,and avoid the version 0.1.1,0.1.2,0.1.3,0.1.4,0.1.5,0.1.6