CVE:CVE-2012-4944
CNNVD:CNNVD-201211-168
FleetCommander是一款基于WEB的应用。
Agile FleetCommander和FleetCommander Kiosk 4.08之前版本中存在多个不限制文件上传漏洞。远程攻击者可利用该漏洞通过未明页面执行任意代码。
solution:Upgrade agilefleet fleetcommander to a higher version than 4.0,and avoid the version (,4.0]; Upgrade agilefleet fleetcommander_kiosk to a higher version than 4.0,and avoid the version (,4.0]