| タイトル | Wuxi Wubang Security Software Co., Ltd. Wubang "Five-in-One" Safety Production Management Information System V3.5 V3.5 Unrestricted Upload |
|---|
| 説明 | Through source code disclosure, and then through code auditing, an unauthenticated endpoint capable of accepting malicious file uploads was identified, and arbitrary commands were executed by uploading malicious script files. This may lead to sensitive data leakage, data tampering or destruction, credential theft, privilege escalation, lateral movement across internal systems, persistence, and full compromise of the application server or related infrastructure. |
|---|
| ソース | ⚠️ https://github.com/Rookie506/CVE/issues/3 |
|---|
| ユーザー | Jreey563 (UID 96485) |
|---|
| 送信 | 2026年10月19日 15:33 (25 日 ago) |
|---|
| モデレーション | 2026年11月13日 21:18 (25 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 437306 [Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System /ws.asmx DiyFileUpload 特権昇格] |
|---|
| ポイント | 20 |
|---|