Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WalRack 1.x before 1.1.9 and 2.x before 2.0.7 does not properly restrict file uploads, which allows remote attackers to execute arbitrary PHP code via vectors involving a double extension, as demonstrated by a .php.zzz file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Walrus_Digit WalRack文件扩展处理任意文件上传漏洞
Vulnerability Description
WalRack 1.1.8,2.0.6及其他版本中存在任意文件上传漏洞。由于文件扩展处理没有正确验证用户提供的输入导致产生此漏洞,攻击者可以借助与双重扩展有关的向量,上传任意文件到受影响的计算机,导致执行任意PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A