Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java in novel-plus all versions allows allows an attacker to upload malicious JSP files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
novel-plus 代码问题漏洞
Vulnerability Description
novel-plus（小说精品屋-plus）是一个多端（PC、WAP）阅读、功能完善的原创文学 CMS 系统。 novel-plus 存在安全漏洞，该漏洞源于/novel-admin/src/main/java/com/java2nb/common/controller/FileController.java缺少对于文件上传的限制。攻击者利用该漏洞可以上传恶意JSP文件。
CVSS Information
N/A
Vulnerability Type
N/A