Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Changing Information Technology Inc. RAVA certificate validation system - Command Injection
Vulnerability Description
RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote attacker with administrator privilege can exploit this vulnerability to perform arbitrary system command and disrupt service.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Changing Information Technology RAVA certificate validation system 安全漏洞
Vulnerability Description
Changing Information Technology RAVA certificate validation system（全景软体 RAVA凭证验证系统网站）是中国Changing Information Technology公司的一个凭证验证系统。 Changing Information Technology RAVA certificate validation system存在安全漏洞，该漏洞源于对网页输入字段的特殊参数过滤不足。攻击者利用该漏洞执行任意系统命令并中断服务。
CVSS Information
N/A
Vulnerability Type
N/A