CVE-2018-9156
7.5
/ 高危
1.89%V4
2018-04-01
18h00 +00:00
18h00 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
An issue was discovered on AXIS P1354 (IP camera) Firmware version 5.90.1.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server mod_include module with "
