CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Rapid7 Vulnerability Database (full)•added 2018/04/01 12:00 a.m.•9 views

CVE-2018-9156: Unrestricted Upload of File with Dangerous Type

An issue was discovered on AXIS P1354 IP camera Firmware version 5.90.1.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server modinclude modul...

7.6CVSS7.2AI score0.03811EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2018/04/01 12:00 a.m.•12 views

CVE-2018-9157: Unrestricted Upload of File with Dangerous Type

An issue was discovered on AXIS M1033-W IP camera Firmware version 5.40.5.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server modinclude...

7.6CVSS7.2AI score0.03109EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by