漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
XML injection In /IDC_Logging/checkifdone.cgi Endpoint On IDC SFX Web Management Interface Version 101
Vulnerability Description
Improper neutralization of special elements in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web management Interface version 101 allows for XML Injection. The application reflects un-sanitized user input from the `file` parameter directly into a CDATA block, allowing an authenticated attacker to break out of the tags and inject arbitrary XML elements. An actor is confirmed to be able to turn this into an reflected XSS but further abuse such as XXE may be possible
CVSS Information
N/A
Vulnerability Type
XML注入(XPath盲注)
Vulnerability Title
International Datacasting SFX Series SuperFlex Satellite Receiver Web management interface 安全漏洞
Vulnerability Description
International Datacasting SFX Series SuperFlex Satellite Receiver Web management interface是美国International Datacasting公司的一个卫星接收设备的Web管理后台。 International Datacasting SFX Series SuperFlex Satellite Receiver Web management Interface 101版本存在安全漏洞，该漏洞源于对文件/IDC_
CVSS Information
N/A
Vulnerability Type
N/A