Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WADE DIGITAL DESIGN CO, LTD. FANTSY - Arbitrary File Upload
Vulnerability Description
Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload a PHP file containing a webshell to perform arbitrary system operation or disrupt service.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
Wade Graphic Design FANTSY 代码问题漏洞
Vulnerability Description
Wade Graphic Design FANTSY是Wade Graphic Design公司的一个数字艺术应用程序。 Wade Graphic Design FANTSY v2.1.8版本存在代码问题漏洞，该漏洞源于存在对文件类型过滤不充分的漏洞，具有一般用户权限的经过身份验证的远程攻击者可以利用此漏洞上传包含webshell的PHP文件来执行任意系统操作或中断服务。
CVSS Information
N/A
Vulnerability Type
N/A