CVE-2018-9156 : 詳細

CVE-2018-9156

7.5
/
高
1.89%V4
2018-04-01
18h00 +00:00
File Inclusion
A04-Insecure Design
Network
2024-08-05
07h17 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

An issue was discovered on AXIS P1354 (IP camera) Firmware version 5.90.1.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server mod_include module with "