Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Avaya IP Office Customer Call Reporter ‘ImageUpload.ashx’远程代码执行漏洞
Vulnerability Description
Avaya IP Office是美国Avaya公司的一套可堆叠、可扩展的单一小型企业通信系统。该系统可通过基于PC的单一门户管理语音通信、即时消息和电子邮件，并支持多种拖放式应用工具。 Avaya IP Office Customer Call Reporter中的Wallboard应用程序内的ImageUpload.ashx中存在远程代码执行漏洞。攻击者可利用该漏洞以用户运行受影响应用程序的权限执行任意代码。Avaya IP Office Customer Call Reporter 7.0版本和8.0
CVSS Information
N/A
Vulnerability Type
N/A