Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A CSV injection (aka Excel Macro Injection or Formula Injection) issue in i-doit 1.14.2 allows an attacker to execute arbitrary commands via a Title parameter that is mishandled in a CSV export.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Synetics i-doit 注入漏洞
Vulnerability Description
Synetics i-doit是德国Synetics公司的一套开源的配置管理数据库(CMDB)软件。该软件包括IT基础设施管理、网络文档管理、IP地址管理和IT资产管理等功能。 Synetics i-doit 1.14.2版本中存在安全漏洞。攻击者可借助‘Title’参数利用该漏洞执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A