Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it in the helpdezk\app\uploads\helpdezk\attachments\ directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HelpDEZk 安全漏洞
Vulnerability Description
HelpDEZk是一套基于PHP的用于管理请求、事件的软件。该软件通过一个共享服务中心管理工作流程、记录流程及维护历史记录等。 HelpDEZk 1.1.1版本中存在安全漏洞。远程攻击者可通过上传.php附件，并向helpdezk\app\uploads\helpdezk\attachments\下的该.php文件发送请求利用该漏洞执行任意的PHP请求。
CVSS Information
N/A
Vulnerability Type
N/A