Submit #753973: Tsinghua Unigroup Electronic Archives System 3.2.210802(62532) Unrestricted Uploadinfo

TitelTsinghua Unigroup Electronic Archives System 3.2.210802(62532) Unrestricted Upload
BeschreibungA critical security vulnerability has been identified in Tsinghua Unigroup Electronic Archives System 3.2.210802 (62532). Due to improper validation in the file upload mechanism, a remote attacker can upload arbitrary files without authentication. Successful exploitation may lead to full system compromise, including arbitrary code execution, data tampering, or persistent backdoor deployment. This vulnerability poses a severe risk to affected deployments and requires immediate remediation.
Quelle⚠️ https://github.com/luoye197-prog/ziguang-fileupload
Benutzer
 lanmeik (UID 95270)
Einreichung07.02.2026 13:21 (vor 4 Monaten)
Moderieren18.02.2026 14:36 (11 days later)
StatusAkzeptiert
VulDB Eintrag346475 [Tsinghua Unigroup Electronic Archives System bis 3.2.210802(62532) uploadFile.html Datei erweiterte Rechte]
Punkte20

Interested in the pricing of exploits?

See the underground prices here!