Lucene search
MitreCVELIST:CVE-2018-9157HistoryApr 01, 2018 - 6:00 p.m.
CVE-2018-9157
2018-04-0118:00:00
mitre
www.cve.org
0.003 Low
EPSS
Percentile
68.7%
An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. The upload web page doesn’t verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server mod_include module with "
References
Related
prion
prion
Cross site request forgery (csrf)
2018-04-01 18:29:00
cve
cve
CVE-2018-9157
2018-04-01 18:29:00
nvd
nvd
CVE-2018-9157
2018-04-01 18:29:00
nessus
nessus
Axis Communication M1033-W IP Camera Remote Code Execution (CVE-2018-9157)
2024-01-23 00:00:00