| عنوان | Beijing Meite Software Technology Co., Ltd. U+Smart Enjoyment WebSite 18.6001.1096.1000 CWE-434 (Unrestricted Upload of File with Dangerous Type) |
|---|
| الوصف | The /Report/Upload/UploadFormImg.ashx interface of the U+ Smart Enjoyment system developed by Chengdu Youjia Changjie Technology Co., Ltd. exhibits a file upload vulnerability. This vulnerability arises from the system's failure to conduct comprehensive type verification, extension name checking, and content filtering before storing user-uploaded files on the server. Attackers can exploit this vulnerability by uploading maliciously crafted files (such as ashx files containing malicious software) to persistently store executable scripts on the server. When other users access the file or the server processes and executes the file, risks such as remote code execution, server takeover, sensitive data leakage, website tampering, or further internal network penetration may occur. |
|---|
| المصدر | ⚠️ https://ucn9h68n9289.feishu.cn/wiki/IYaowPR6licbC3kdw3xcJpQ7n6b?from=from_copylink |
|---|
| المستخدم | Anonymous User |
|---|
| ارسال | 24/07/2026 11:24 AM (2 أشهر منذ) |
|---|
| الاعتدال | 06/09/2026 02:52 PM (1 month later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 399431 [Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000 UploadFormImg.ashx ملف تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|