Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An OS command injection vulnerability exists in Akaunting v3.1.3 and earlier. An attacker can manipulate the company locale when installing an app to execute system commands on the hosting server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Akaunting 操作系统命令注入漏洞
Vulnerability Description
Akaunting是Akaunting公司的一个应用软件提供一个在线管理资金所需的所有工具。 Akaunting v3.1.3及之前版本存在操作系统命令注入漏洞，该漏洞源于存在操作系统命令注入，攻击者可以在托管服务器上执行系统命令时操纵公司区域设置。
CVSS Information
N/A
Vulnerability Type
N/A