Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
shishuocms ManageUpLoadAction.java handleRequest unrestricted upload
Vulnerability Description
A vulnerability has been found in shishuocms 1.1 and classified as critical. This vulnerability affects the function handleRequest of the file src/main/java/com/shishuo/cms/action/manage/ManageUpLoadAction.java. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
shishuocms 代码问题漏洞
Vulnerability Description
shishuocms（师说CMS）是gaofeng4623个人开发者的一个学习内容管理系统。 shishuocms 1.1版本存在代码问题漏洞，该漏洞源于ManageUpLoadAction.java文件存在无限制上传，可能导致远程攻击。
CVSS Information
N/A
Vulnerability Type
N/A