Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
InvoicePlane version 1.4.10 is vulnerable to a Arbitrary File Upload resulting in an authenticated user can upload a malicious file to the webserver. It is possible for an attacker to upload a script which is able to compromise the webserver.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
InvoicePlane 安全漏洞
Vulnerability Description
InvoicePlane是一套开源财务系统。该系统具有管理报价、发票和付款等功能。 InvoicePlane 1.4.10版本中存在任意文件上传漏洞。攻击者可利用该漏洞向Web服务器上传恶意的文件或可能上传脚本来控制Web服务器。
CVSS Information
N/A
Vulnerability Type
N/A