| Titolo | https://github.com/megagao/production_ssm production_ssm 1 remote code execution |
|---|
| Descrizione | A vulnerability classified as critical was discovered in the production management ERP system production_ssm. This affects the picture upload functionality of the file PictureServiceImpl.java. A carefully crafted malicious script file upload can lead to remote code execution. |
|---|
| Fonte | ⚠️ https://github.com/Hao-Ni/CVE/issues/4 |
|---|
| Utente | fatd0g (UID 84578) |
|---|
| Sottomissione | 06/05/2025 03:01 (1 Anno fa) |
|---|
| Moderazione | 15/05/2025 14:34 (9 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 309069 [feng_ha_ha/megagao ssm-erp/production_ssm 1.0 PictureServiceImpl.java uploadPicture file escalationi di privilegi] |
|---|
| Punti | 18 |
|---|