Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URI, related to "received URLs in the message window." NOTE: this issue has been disputed due to the user-assisted nature, since the URL must be selected and launched by the victim
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CenterIM URI处理任意命令执行漏洞
Vulnerability Description
CenterIM是基于ICQ的即时消息聊天工具。 CenterIM处理用户数据时存在输入验证漏洞，远程攻击者可能利用此漏洞在用户系统上执行任意命令。 CenterIM没有检查在消息窗口中所接收到URL中的非法字符，如"\"、"\""、";"、"$"、"{"、"}"、"&&"、"||"等，如果用户受骗点击了接收到消息中的恶意URI的话，就可能导致执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A