CVE  通用漏洞与披露Common Vulnerabilities and Exposures

[原文]A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL.

[CNNVD]Roxen执行任意命令或者查看任意文件漏洞(CNNVD-200108-005)

        Roxen 2.0.92之前的2.0 ，和2.1.264之前的2.1版本不正确的解码UTF-8，Mac和ISO-2202 已编码的URLs，远程攻击者借助已编码的URL执行任意命令或者查看任意文件。