Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/comn/service/editUploadImage URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
中天网络科技 OFCMS 安全漏洞
Vulnerability Description
中天网络科技 OFCMS是中国中天网络科技公司的一套使用Java语言开发的内容管理系统（CMS）。 中天网络科技 OFCMS 1.1.3之前版本中存在安全漏洞。远程攻击者可利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A