| शीर्षक | Beijing Metasoft Technology Co., Ltd. (China) MetaCRM 6.4.2 Unrestricted Upload |
|---|
| विवरण | MetaCRM6 is an enterprise-level customer relationship management system developed by Beijing Metasoft Technology Co., Ltd. Launched in December 2009, it targets medium and large enterprises, offering intelligent, platform-based CRM solutions. Key features include 360° customer profile management, full sales cycle support, multi-organization management, efficient delivery processes, and integration with ERP/PLM/MES. It serves over 40 sectors like smart manufacturing and medical equipment, with a mobile app for iPad.
Beijing Metasoft Technology Co., Ltd. (China) ： http://www.metasoft.com.cn/
However,The /business/common/sms/sendsms.jsp interface is vulnerable to arbitrary file upload attacks.
Uploading Webshell: Attackers upload script files containing malicious code (such as .jsp, .php, .asp, etc.). Once these files are executed by the server, they can achieve remote control of the server, including viewing/modifying/deleting files, executing system commands, and stealing sensitive data (such as database account passwords, user information, etc.).
|
|---|
| स्रोत | ⚠️ https://github.com/FightingLzn9/vul/blob/main/MetaCRM-Upload-7.md |
|---|
| उपयोगकर्ता | nu11 (UID 81380) |
|---|
| सबमिशन | 08/07/2025 12:41 PM (1 वर्ष पहले) |
|---|
| संयम | 19/07/2025 09:16 AM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 316994 [Metasoft 美特软件 MetaCRM तक 6.4.2 sendsms.jsp file अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|