Submit #547878: vendor https://www.lingxing.com/ v2 remote code executioninfo

Titelvendor https://www.lingxing.com/ v2 remote code execution
BeschreibungA critical security vulnerability has been identified in the file upload functionality of the .NET system. This vulnerability allows unauthenticated users to upload arbitrary files, which can lead to remote code execution (RCE) and potentially grant attackers full control over the server.
Quelle⚠️ https://github.com/666lail/report/blob/main/tmp/fileUpload_1.md
Benutzer
 207556249 (UID 81808)
Einreichung01.04.2025 16:00 (vor 1 Jahr)
Moderieren14.04.2025 00:14 (12 days later)
StatusAkzeptiert
VulDB Eintrag304592 [Lingxing ERP 2 FileUpload.ashx?method=DoUpload Datei erweiterte Rechte]
Punkte17

Do you need the next level of professionalism?

Upgrade your account now!