CVE-2020-7831

8.8HIGH

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directo

发布于: 8/24/2020更新于: 11/21/2024

描述

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however.

AI分析AI驱动

受影响产品

inogardebiz4u
cviewer_object_1.0.5.1
microsoftwindows
-

参考资料