Lucene search
MitreCVELIST:CVE-2018-9156HistoryApr 01, 2018 - 6:00 p.m.
CVE-2018-9156
2018-04-0118:00:00
mitre
www.cve.org
0.003 Low
EPSS
Percentile
71.4%
An issue was discovered on AXIS P1354 (IP camera) Firmware version 5.90.1.1 devices. The upload web page doesn’t verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server mod_include module with "
References
Related
cve
cve
CVE-2018-9156
2018-04-01 18:29:00
nvd
nvd
CVE-2018-9156
2018-04-01 18:29:00
prion
prion
Cross site request forgery (csrf)
2018-04-01 18:29:00
nessus
nessus
Axis Communication P1354 IP Camera Remote Code Execution (CVE-2018-9156)
2024-01-23 00:00:00