Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
iThoughtsHD for iOS 输入验证漏洞
Vulnerability Description
iThoughtsHD是英国软件开发者Craig Scott所研发的一套针对iPad设计的思维导图软件。该软件能够建立Mindmap，并支持将创意用树状图快捷地记录下来。 iPad设备上的iThoughtsHD app 4.19 for iOS中存在输入验证漏洞。当使用WiFi Transfer功能时，远程攻击者可通过放置‘%00’序列在扩展文件名后（如html%00.txt文件）利用该漏洞上传任意文件。
CVSS Information
N/A
Vulnerability Type
N/A