CVE-2018-9157
7.5
/ 高危
1.68%V4
2018-04-01
18h00 +00:00
18h00 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server mod_include module with "
