Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a .dxstudio file that invokes this method.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DX Studio Player shell.execute JavaScript API方法远程任意外壳指令注入漏洞
Vulnerability Description
Worldweaver DX Studio Player 3.0.29.0版本,3.0.22.0版本,3.0.12.0版本,以及其他3.0.29.1版本之前的版本,当被用作Firefox的一个插件程序时，没有限制对shell.execute JavaScript API方法的访问，远程攻击者可以借助一个能够调用该方法的 .dxstudio文件，执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A