| शीर्षक | www.digiwin.com digiwin ERP system v5.1.3 Unauthenticated File Upload Leading to Remote Code Execution |
|---|
| विवरण | A critical vulnerability has been identified in the Digiwin ERP system, specifically in the file upload functionality of the DoWebUpload method. This vulnerability allows unauthenticated users to upload arbitrary files, potentially leading to remote code execution and complete server compromise. |
|---|
| स्रोत | ⚠️ https://github.com/Rain1er/report/blob/main/THNlcnBf/RCE_4.md |
|---|
| उपयोगकर्ता | XU NIE (UID 82414) |
|---|
| सबमिशन | 07/03/2025 04:33 PM (1 वर्ष पहले) |
|---|
| संयम | 24/03/2025 12:19 PM (17 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 300726 [Digiwin ERP 5.1 /Api/FileUploadApi.ashx DoUpload/DoWebUpload Arquivo अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|