Invia #436676: 上海灵当信息科技有限公司 Lingdang CRM <= 8.6.4.3 arbitrary file uploadinformazioni

Titolo上海灵当信息科技有限公司 Lingdang CRM <= 8.6.4.3 arbitrary file upload
DescrizioneLingdang CRM is an intelligent customer relationship management tool specifically designed for small and medium-sized enterprises. It is developed and operated by Shanghai Lingdang Information Technology Co., Ltd. It is widely used in various industries including finance, education, healthcare, IT services, and real estate. Lingdang CRM helps businesses meet their customer personalization management needs and enhances their competitiveness. Whether it's about acquiring new customers, maintaining existing ones, or managing the sales process and service management, Lingdang CRM provides comprehensive and efficient solutions. LingDang CRM versions x.x.x.x and earlier are affected by an arbitrary file upload vulnerability, which occurs at /crm/wechatSession/index.php. This vulnerability can be exploited without requiring any special permissions.
Fonte⚠️ https://wiki.shikangsi.com/post/share/8c9422c2-ecad-4471-97a2-6f8035a2ddf5
Utente
 XingYue_Mstir (UID 72225)
Sottomissione04/11/2024 04:14 (1 Anno fa)
Moderazione12/11/2024 07:45 (8 days later)
StatoAccettato
Voce VulDB283970 [上海灵当信息科技有限公司 Lingdang CRM fino a 8.6.4.3 index.php?msgid=1&operation=upload File escalationi di privilegi]
Punti20

Interested in the pricing of exploits?

See the underground prices here!