إرسال #547878: vendor https://www.lingxing.com/ v2 remote code executionالمعلومات

عنوانvendor https://www.lingxing.com/ v2 remote code execution
الوصفA critical security vulnerability has been identified in the file upload functionality of the .NET system. This vulnerability allows unauthenticated users to upload arbitrary files, which can lead to remote code execution (RCE) and potentially grant attackers full control over the server.
المصدر⚠️ https://github.com/666lail/report/blob/main/tmp/fileUpload_1.md
المستخدم
 207556249 (UID 81808)
ارسال01/04/2025 04:00 PM (1 سنة منذ)
الاعتدال14/04/2025 12:14 AM (12 days later)
الحالةتمت الموافقة
إدخال VulDB304592 [Lingxing ERP 2 FileUpload.ashx?method=DoUpload ملف تجاوز الصلاحيات]
النقاط17

Do you know our Splunk app?

Download it now for free!