Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Unrestricted Upload of File with Dangerous Type vulnerability in AMSS++
Vulnerability Description
File upload restriction evasion vulnerability in AMSS++ version 4.31. This vulnerability could allow an authenticated user to potentially obtain RCE through webshell, compromising the entire infrastructure.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
AMSS++ 代码问题漏洞
Vulnerability Description
AMSS++是Amssplus的一个办公管理支持系统的工具。 AMSS++ 4.31 版本存在代码问题漏洞，该漏洞源于可以绕过文件上传限制。
CVSS Information
N/A
Vulnerability Type
N/A