Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unrestricted file upload vulnerability in calendar_admin.asp in Full Revolution aspWebCalendar 2008 allows remote attackers to upload and execute arbitrary code via the FILE1 parameter in an uploadfileprocess action, probably followed by a direct request to the file in calendar/eventimages/.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Full Revolution aspWebCalendar 'calendar_admin.asp' 无限制文件上传漏洞
Vulnerability Description
Full Revolution aspWebCalendar 2008的calendar_admin.asp中存在无限制文件上传漏洞,远程攻击者通过一个uploadfileprocess操作的FILE1参数来上传和执行任意代码,并可能伴随着对calendar/eventimages/发送的一个直接请求。
CVSS Information
N/A
Vulnerability Type
N/A