CVE-2018-9157 : 상세 정보

CVE-2018-9157

7.5
/
높음
1.68%V4
2018-04-01
18h00 +00:00
File Inclusion
A04-Insecure Design
Network
2024-08-05
07h17 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server mod_include module with "