CVE-2018-9156 : 상세 정보

CVE-2018-9156

7.5
/
높음
1.89%V4
2018-04-01
18h00 +00:00
File Inclusion
A04-Insecure Design
Network
2024-08-05
07h17 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

An issue was discovered on AXIS P1354 (IP camera) Firmware version 5.90.1.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server mod_include module with "