| عنوان | Flash flood Disaster monitoring and early warning system 2.0 service module has arbitrary file upload vulnerability |
|---|
| الوصف | Chengdu Wanjiang Gangli Technology Co., LTD. - There is an unauthorized arbitrary file upload vulnerability in the 2.0 service module of the mountain flood Disaster monitoring and warning system, and the attacker can upload webshell directly to the target server without logging in, which is great harm!Chengdu Wanjiang Gangli Technology Co., LTD. - There is an unauthorized arbitrary file upload vulnerability in the 2.0 service module of the mountain flood Disaster monitoring and warning system, and the attacker can upload webshell directly to the target server without logging in, which is great harm! |
|---|
| المصدر | ⚠️ https://github.com/yueying638/cve/blob/main/upload.md |
|---|
| المستخدم | yueying (UID 50455) |
|---|
| ارسال | 12/07/2023 11:36 AM (3 سنوات منذ) |
|---|
| الاعتدال | 20/07/2023 10:28 AM (8 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 235072 [Chengdu Flash Flood Disaster Monitoring and Warning System FileHandler.ashx تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|