| शीर्षक | Shandong Hoteam Software Co., Ltd. Huatian Software InforCenter PLM <8.3.8 Remote Code Execution |
|---|
| विवरण | A critical vulnerability exists in the InforCenter PLM system developed by Huatian Software. The uploadFileToIIS function within the /Base/BaseHandler.ashx interface fails to properly restrict file extensions and lacks mandatory authentication. An unauthenticated remote attacker can exploit this flaw by submitting a crafted multipart/form-data request to upload a malicious .aspx webshell. Successful exploitation allows the attacker to execute arbitrary system commands under the context of the IIS process, leading to a complete compromise of the PLM server and potential leakage of sensitive intellectual property and R&D data. |
|---|
| स्रोत | ⚠️ https://my.feishu.cn/docx/ToGkdd5jwokb4PxEMkHcKrfXn3b?from=from_copylink |
|---|
| उपयोगकर्ता | 0menc (UID 75423) |
|---|
| सबमिशन | 16/03/2026 10:03 AM (7 महीनों पहले) |
|---|
| संयम | 31/03/2026 06:25 PM (15 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 354450 [Shandong Hoteam InforCenter PLM तक 8.3.8 /Base/BaseHandler.ashx uploadFileToIIS Arquivo अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|