Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to (1) common/html_editor/image_browser.upload.html, (2) common/html_editor/image_browser.html, or (3) common/html_editor/html_editor.html. NOTE: this can also be used for cross-site scripting (XSS) attacks by uploading cascading style sheet (.CSS) files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
E-Business Designer 多个输入验证漏洞
Vulnerability Description
E-Business Designer (eBD) 3.1.4及之前版本可以使远程攻击者借助对(1) common/html_editor/image_browser.upload.html, (2) common/html_editor/image_browser.html, 或(3) common/html_editor/html_editor.html的直接请求，上传或修改任意文件。 注意: 通过上传层叠式样式表(.CSS) 文件，此漏洞也可用于跨站脚本攻击(XSS)。
CVSS Information
N/A
Vulnerability Type
N/A