CVE-2026-54200— TeamDavid scjob字段本地文件包含漏洞
影响版本矩阵 1
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Tobit Laboratories AG | TeamDavid | ≤ Rollout 524 | affected |
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2026-54200 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
TeamDavid: Local File Inclusion via the form field 'scjob'
来源: CVE Program / CVE List V5
Vulnerability Description
Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an '@@attach' command in the form field 'scjob', files can be attached to a message, which can then be downloaded by an authenticated user. A filter is in place that restricts access to the David con-fig folder and the user folder. However, this filter can be bypassed by specifying an alternate data stream, allowing the download of sensitive files such as other users' access files containing their passwords or the server's private key. This issue affects TeamDavid through Rollout 524.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:L
来源: CVE Program / CVE List V5
Vulnerability Type
文件名或路径的外部可控制
来源: CVE Program / CVE List V5
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Tobit Laboratories AG | TeamDavid | 0 ~ Rollout 524 | - |
二、漏洞 CVE-2026-54200 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-54200 的情报信息
请登录查看更多情报信息。
CVE-2026-54200 厂商页面 (1)
同批安全公告 · Tobit Laboratories AG · 2026-08-07 · 共 22 条
| CVE-2026-54210 | 9.5 CRITICAL | 文件上传功能文件名缓冲区溢出漏洞 |
| CVE-2026-54212 | 9.5 CRITICAL | TeamDavid JSON解析缓冲区溢出漏洞 |
| CVE-2026-54211 | 9.5 CRITICAL | TeamDavid 多个表单数据参数缓冲区溢出漏洞 |
| CVE-2026-54213 | 9.2 CRITICAL | TeamDavid 通过 'internalRestart' 端点导致拒绝服务漏洞 |
| CVE-2026-54203 | 9.2 CRITICAL | TeamDavid 内存泄漏敏感信息漏洞 |
| CVE-2026-54209 | 8.9 HIGH | TeamDavid 'editini'函数缓冲区溢出漏洞 |
| CVE-2026-54218 | 8.8 HIGH | TeamDavid 弱加密与不安全密码存储漏洞 |
| CVE-2026-54202 | 8.5 HIGH | TeamDavid 归档创建功能中的路径遍历漏洞 |
| CVE-2026-54208 | 8.5 HIGH | TeamDavid 任意文件写入导致存储型XSS |
| CVE-2026-12070 | 8.4 HIGH | TeamDavid 通过表单字段 'scjob' 实现任意文件删除漏洞 |
| CVE-2026-54204 | 7.7 HIGH | TeamDavid 搜索功能服务端请求伪造漏洞 |
| CVE-2026-54201 | 6.9 MEDIUM | TeamDavid: 缺失授权漏洞 |
| CVE-2026-54207 | 6.3 MEDIUM | TeamDavid move archive pathname SSRF 漏洞 |
| CVE-2026-54206 | 6.3 MEDIUM | TeamDavid发送功能pathname参数SSRF漏洞 |
| CVE-2026-54205 | 6.3 MEDIUM | TeamDavid link存储功能路径名参数服务器端请求伪造漏洞 |
| CVE-2026-54215 | 5.3 MEDIUM | TeamDavid replyUrl参数开放重定向漏洞 |
| CVE-2026-54199 | 5.3 MEDIUM | TeamDavid 链接存储功能存在请求体头注入漏洞 |
| CVE-2026-54214 | 5.3 MEDIUM | TeamDavid 'cType' 参数头部注入漏洞 |
| CVE-2026-54216 | 5.3 MEDIUM | TeamDavid 'EntryInfo'参数反射型跨站脚本漏洞 |
| CVE-2026-54217 | 5.3 MEDIUM | TeamDavid Web应用存储型XSS漏洞 |
显示前 20 条，共 22 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-54200
暂无评论