Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Unquoted path or search item vulnerability in SugarSync
Vulnerability Description
Unquoted path or search item vulnerability in SugarSync versions prior to 4.1.3 for Windows. This misconfiguration could allow an unauthorized local user to inject arbitrary code into the unquoted service path, resulting in privilege escalation.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
未经引用的搜索路径或元素
Vulnerability Title
SugarSync 代码问题漏洞
Vulnerability Description
SugarSync是SugarSync公司的一个可以自动访问和共享任何文件夹中照片、视频和文件的软件。 SugarSync 4.1.3之前版本存在代码问题漏洞，该漏洞源于允许未经授权的本地用户将任意代码注入未加引号的服务路径，从而导致权限升级。
CVSS Information
N/A
Vulnerability Type
N/A