漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Raonwiz RAON K Upload Arbitrary Command Execution Vulnerability
Vulnerability Description
A vulnerability in File Transfer Solution of Raonwiz could allow arbitrary command execution as the result of viewing a specially-crafted web page. This vulnerability is due to insufficient validation of the parameter of the specific method. An attacker could exploit this vulnerability by setting the parameter to the command they want to execute. A successful exploit could allow the attacker to execute arbitrary commands on a target system as the user. However, the victim must run the Internet Explorer browser with administrator privileges because of the cross-domain policy.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
输入验证不恰当
Vulnerability Title
Raonwiz K Upload 输入验证错误漏洞
Vulnerability Description
Raonwiz K Upload是韩国Raonwiz公司的一款文件传输组件。 Raonwiz K Upload 存在安全漏洞，该漏洞源于Raonwiz的文件传输解决方案中具体方法的参数验证不足造成的。攻击者可利用该漏洞作为用户在目标系统上执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A