| शीर्षक | Chengdu Sobey Digital Technology Co., Ltd. Sobey Media Convergence System V2.0-2.1 Uploaded File |
|---|
| विवरण | This interface does not effectively validate and filter uploaded filenames and content. Attackers can construct special requests to upload malicious script files (such as JSPs) with fake extensions and write these script files to the web directory via path traversal (such as ../../). After successful upload, attackers can trigger remote code execution (RCE) by accessing the script. |
|---|
| स्रोत | ⚠️ https://github.com/hacker-routing/cve/issues/1 |
|---|
| उपयोगकर्ता | routing_love (UID 92805) |
|---|
| सबमिशन | 20/11/2025 07:51 AM (11 महीनों पहले) |
|---|
| संयम | 06/12/2025 09:56 AM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 334602 [Sobey Media Convergence System 2.0/2.1 upload file निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 19 |
|---|