Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in URVE Build 24.03.2020. By using the _internal/pc/vpro.php?mac=0&ip=0&operation=0&usr=0&pass=0%3bpowershell+-c+" substring, it is possible to execute a Powershell command and redirect its output to a file under the web root.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Urve 操作系统命令注入漏洞
Vulnerability Description
Urve是英国Urve公司的一个用于预约会议室/客房的设备。该设备可支持与MS Exchange，Lotus，Office 365，Google日历和其他系统的集成用于支持会议室、客房的预定。 Urve Build 24.03.2020 存在操作系统命令注入漏洞，该漏洞源于通过使用_internal/pc/vpro.php?mac=0&ip=0&operation=0&usr=0&pass=0%3bpowershell+-c+"重定向它的输出到web根目录下的文件，这是可能的执行一个Powershell命
CVSS Information
N/A
Vulnerability Type
N/A