Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive files. An attacker can upload a nested ZIP (a ZIP containing another ZIP) where the inner archive contains an executable file (e.g. webshell.php). When the application extracts the uploaded archives, the executable may be extracted into a web-accessible directory. This can lead to remote code execution (RCE), data disclosure, account compromise, or further system compromise depending on the web server/process privileges. The issue arises from insufficient validation of archive contents and inadequate restrictions on extraction targets.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
e-point CMS 安全漏洞
Vulnerability Description
e-point CMS是波兰e-point公司的一个内容管理系统。 e-point CMS eagle.gsam-1169.1版本存在安全漏洞，该漏洞源于文件上传功能未充分验证存档内容，可能导致远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A