Description
Ilevia EVE X1 Server 系统中，/ajax/history/get_history_data_odic.php 接口存在命令执行漏洞，该接口在处理用户提交的参数时缺乏有效的安全校验，攻击者可构造恶意请求触发服务器执行任意系统命令。
Ilevia EVE X1 Server /ajax/history/get_history_data_odic.php 命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/iSee857/ilevia-EVE-X1-Server
https://fortiguard.fortinet.com/encyclopedia/ips/58761
https://app.opencve.io/cve/?vendor=ilevia&product=eve_x1_server
https://www.isssource.com/ilevia-fixes-eve-x1-server/
https://www.vulncheck.com/advisories/ilevia-eve-x1-server-unauth-command-injection
https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-60738
https://cve.imfht.com/product/EVE%20X1%20Server?lang=en