Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) archive_name parameter to the Power FS module (plugins/action.powerfs/class.PowerFSController.php), a (2) file name to the getTrustSizeOnFileSystem function in the File System (Standard) module (plugins/access.fs/class.fsAccessWrapper.php), or the (3) revision parameter to the Subversion Repository module (plugins/meta.svn/class.SvnManager.php).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AjaXplorer 操作系统命令注入漏洞
Vulnerability Description
AjaXplorer是一款基于Web的远程文件管理器。该管理器支持上传和下载文件、在线文件编辑、图片预览等。 AjaXplorer 5.0.1之前版本中存在操作系统命令注入漏洞。攻击者可借助‘archive_name’、‘file’或‘revision’参数中的shell元字符利用该漏洞在系统上执行任意Shell命令。
CVSS Information
N/A
Vulnerability Type
N/A