提出 #753973: Tsinghua Unigroup Electronic Archives System 3.2.210802(62532) Unrestricted Upload情報

タイトルTsinghua Unigroup Electronic Archives System 3.2.210802(62532) Unrestricted Upload
説明A critical security vulnerability has been identified in Tsinghua Unigroup Electronic Archives System 3.2.210802 (62532). Due to improper validation in the file upload mechanism, a remote attacker can upload arbitrary files without authentication. Successful exploitation may lead to full system compromise, including arbitrary code execution, data tampering, or persistent backdoor deployment. This vulnerability poses a severe risk to affected deployments and requires immediate remediation.
ソース⚠️ https://github.com/luoye197-prog/ziguang-fileupload
ユーザー
 lanmeik (UID 95270)
送信2026年02月07日 13:21 (4 月 ago)
モデレーション2026年02月18日 14:36 (11 days later)
ステータス承諾済み
VulDBエントリ346475 [Tsinghua Unigroup Electronic Archives System 迄 3.2.210802(62532) uploadFile.html ファイル 特権昇格]
ポイント20

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!