Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A CWE-15 "External Control of System or Configuration Setting" in ldbMT.so in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to modify system configuration via crafted HTTP requests.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L
Vulnerability Type
输入验证不恰当
Vulnerability Title
Q-Free MAXTIME Suite 输入验证错误漏洞
Vulnerability Description
Q-Free MAXTIME Suite是Q-Free公司的一个用于本地交通信号管理的软件套件。 Q-Free MAXTIME Suite 2.11.0版本及之前版本存在输入验证错误漏洞，该漏洞源于ldbMT.so中的不正确输入验证。攻击者利用该漏洞可以通过特制的HTTP请求修改系统配置。
CVSS Information
N/A
Vulnerability Type
N/A