Create maxView_Storage_Manager_dynamiccontent.properties.xhtml_RCE.md

add maxView Storage Manager dynamiccontent.properties.xhtml RCE
This commit is contained in:
Goby 2023-06-09 18:01:11 +08:00 committed by GitHub
parent 63898c20b2
commit 7d1892d6fe
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -0,0 +1,12 @@
## maxView Storage Manager dynamiccontent.properties.xhtml RCE
| **Vulnerability** | **maxView Storage Manager dynamiccontent.properties.xhtml RCE** |
| :----: | :-----|
| **Chinese name** | maxView Storage Manager 系统 dynamiccontent.properties.xhtml 远程代码执行漏洞 |
| **CVSS core** | 9.8 |
| **FOFA Query** (click to view the results directly)| [title=="maxView Storage Manager - Login"](https://en.fofa.info/result?qbase64=dGl0bGU9PSJtYXhWaWV3IFN0b3JhZ2UgTWFuYWdlciAtIExvZ2luIg%3D%3D) |
| **Number of assets affected** | 1465 |
| **Description** | maxView Storage Manager is a management system for enterprise storage and communication solutions.<br></p><p>There is a code execution vulnerability in maxView Storage Manager, an attacker can execute arbitrary code through dynamiccontent.properties.xhtml to gain server privileges. |
| **Impact** | There is a code execution vulnerability in maxView Storage Manager, an attacker can execute arbitrary code through dynamiccontent.properties.xhtml to gain server privileges. |
![](https://s3.bmp.ovh/imgs/2023/06/09/b3b919992e1c09f1.gif)