Pesquisadores
Voltar
Hackping
#15800
de 60,591
19.6
CVSS total
Vulnerabilidades
·
2
Crítica
2
PT-2018-12517
2018-07-20
9.8
CVE-2018-14440
Cckevincyh Ssh
Companywebsite
An issue exists in the software, allowing SQL injection via the `noticeInfo` parameter in the "admin/noticeManageAction queryNotice.action" endpoint.
PT-2018-12518
2018-07-20
9.8
CVE-2018-14441
Ssh Company
Cckevincyh Ssh Companywebsite
An issue was discovered that allows arbitrary file upload. This is demonstrated by uploading a .jsp file with the `content type` set to `image/jpeg`. The upload is possible through the "admin/admin/fileUploadAction fileUpload.action" endpoint.