CVE:CVE-2018-14441
CNNVD:CNNVD-201807-1530
Cckevincyh SSH CompanyWebsite是一套基于Bootstrap、Ajax和SSH框架的企业网站系统。
Cckevincyh SSH CompanyWebsite 2018-05-03及之前版本中的admin/admin/fileUploadAction_fileUpload.action文件存在安全漏洞。攻击者可利用该漏洞上传任意文件。
solution:Upgrade ssh_companywebsite_project ssh_companywebsite to a higher version than 2018-05-03,and avoid the version (,2018-05-03]