Thomson Reuters Velocity Analytics – Remote Code Injection

• Exploit Database
• 118 阅读

• 作者： Eduardo Gonzalez
  日期： 2013-11-22
• 类别：

  • remote
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/38850/
• 1 2 3 4 5 6 7 8 9 10

  source: https://www.securityfocus.com/bid/63880/info   Thomson Reuters Velocity Analytics is prone to a vulnerability that lets attackers inject and execute arbitrary code.   Successfully exploiting this issue may allow an attacker to upload and execute arbitrary code with SYSTEM privileges.   Thomson Reuters Velocity Analytics 6.94 build 2995 is vulnerable; other versions may also be affected.   http://www.example.com/VhttpdMgr?action=importFile&fileName={BACKDOOR}