| शीर्षक | Beijing Meite Software Technology Co., Ltd. MetaCRM6 6.4.0 Beta06 CWE-434 (Unrestricted Upload of File with Dangerous Type) |
|---|
| विवरण | There is a serious file upload vulnerability in the MTCRM6 system of Beijing Meite Software Technology Co., Ltd. The vulnerability is located in the /common/jsp/upload3.jsp interface. The interface does not restrict the type of uploaded files, and an attacker without authentication can exploit this vulnerability. This allows webshell to be transferred to the server. Successful exploitation of this vulnerability could enable remote code execution, granting the attacker full administrative access to the server. |
|---|
| स्रोत | ⚠️ https://ucn9h68n9289.feishu.cn/wiki/XmoNwpJjJiQrBtkLMitccF56ntb |
|---|
| उपयोगकर्ता | Anonymous User |
|---|
| सबमिशन | 23/04/2026 09:58 AM (1 महीना पहले) |
|---|
| संयम | 16/05/2026 07:41 PM (23 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 364385 [Metasoft 美特软件 MetaCRM तक 6.4.0 Beta06 /common/jsp/upload3.jsp Arquivo अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|