Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenSTAManager has an OS Command Injection in P7M File Processing
Vulnerability Description
OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a malicious filename to execute arbitrary system commands on the server.
CVSS Information
N/A
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
OpenSTAManager 操作系统命令注入漏洞
Vulnerability Description
OpenSTAManager是Devcode开源的一个用于技术援助和计费的开源管理软件。 OpenSTAManager 2.9.8及之前版本存在操作系统命令注入漏洞，该漏洞源于P7M文件解码功能存在操作系统命令注入，可能导致已验证的攻击者上传包含恶意文件名的ZIP文件以在服务器上执行任意系统命令。
CVSS Information
N/A
Vulnerability Type
N/A