Exploit for Improper Handling of Exceptional Conditions in Apache Struts

CNVD-ID CNVD-2017-02474 发布时间 2017-03-07 危害级别 高 AV:N/AC:L/Au:N/C:C/I:C/A:C 影响产品 Apache struts =2.3.5，=2.5， CVE Identifier CVE-2017-5638 Problem It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value isn't valid an exception is thrown which is then use...

NetDrive Unified Communications Platform suffers from s2-045 Remote Code Execution Vulnerability

NetDrive Unified Communications Platform is an enterprise IT platform that uses a unified communications interface to integrate VoIP phone systems, email and other communication methods. Nethub's unified communication platform uses Apache Struts xwork as the website application framework, and the...