Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Hunesion i-oneNet unrestricted file upload vulnerability
Vulnerability Description
In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.16, the specific upload web module doesn't verify the file extension and type, and an attacker can upload a webshell. After the webshell upload, an attacker can use the webshell to perform remote code exection such as running a system command.
CVSS Information
N/A
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
Hunesion i-oneNet 代码问题漏洞
Vulnerability Description
Hunesion i-oneNet是一套数据传输解决方案。 Hunesion i-oneNet 3.0.7版本至3.0.53版本和4.0.4版本至4.0.16版本中存在安全漏洞,该漏洞源于上传Web模块没有验证文件扩展和类型。攻击者可利用该漏洞上传Webshell。
CVSS Information
N/A
Vulnerability Type
N/A