Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE
Vulnerability Description
BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the attacker can upload and execute arbitrary PHP code using the "Cloud Storage Addin," leading to unauthenticated code execution.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
使用候选路径或通道进行的认证绕过
Vulnerability Title
BigAntSoft BigAnt Server 安全漏洞
Vulnerability Description
BigAntSoft BigAnt Server是BigAntSoft公司的一个即时通讯解决方案。 BigAntSoft BigAnt Server 5.6.06版本及之前版本存在安全漏洞。攻击者利用该漏洞可以通过默认公开的 SaaS 注册机制创建管理员用户，从而上传和执行任意 PHP 代码。
CVSS Information
N/A
Vulnerability Type
N/A