Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Forms generated by JQueryForm.com before 2022-02-05 (if file-upload capability is enabled) allow remote unauthenticated attackers to upload executable files and achieve remote code execution. This occurs because file-extension checks occur on the client side, and because not all executable content (e.g., .phtml or .php.bak) is blocked.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
JqueryForm.com Jquery Form Builder 安全漏洞
Vulnerability Description
JqueryForm.com Jquery Form Builder是JqueryForm.com公司的一个表单生成器。 JqueryForm.com Jquery Form Builder 存在代码问题漏洞，该漏洞源于JqueryForm.com 在 2022-02-05 之前生成的表单（如果启用了文件上传功能）允许远程未经身份验证的攻击者上传可执行文件并实现远程代码执行。 发生这种情况是因为文件扩展检查发生在客户端，并且并非所有可执行内容（例如，.phtml 或 .php.bak）都被阻止。
CVSS Information
N/A
Vulnerability Type
N/A