Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file that contains a JavaScript payload to steal a user's credentials.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ShopNx 安全漏洞
Vulnerability Description
ShopNx是一款用AngularJS、NodeJS和MongoDB创建的购物网站单页应用程序。 ShopNx 2017-11-17及之前版本中存在安全漏洞，该漏洞源于程序没有充分过滤用户提交的输入。远程攻击者可利用该漏洞上传带有JavaScript载荷的恶意HTML文件，从而窃取用户的凭证。
CVSS Information
N/A
Vulnerability Type
N/A