漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server mod_include module with "<!--#exec cmd=" support. The file needs to include a specific string to meet the internal system architecture. After the webshell upload, an attacker can use the webshell to perform remote code execution such as running a system command (ls, ping, cat /etc/passwd, etc.). NOTE: the vendor reportedly indicates that this is an intended feature or functionality
漏洞信息
N/A
漏洞
N/A
漏洞
AXIS M1033-W 安全漏洞
漏洞信息
AXIS M1033-W是瑞典安讯士（Axis）公司的一款网络摄像机产品。 使用5.40.5.1版本固件的AXIS M1033-W存在安全漏洞，该漏洞源于上传Web页面没有校验文件类型。远程攻击者可利用该漏洞上传webshell，执行代码。
漏洞信息
N/A
漏洞
N/A