| タイトル | Hanwang Technology Co., Ltd. Hanwang e-Face General Management Platform V6.3.5.4 Remote Code Execution (RCE) |
|---|
| 説明 | A critical vulnerability was found in Hanwang Technology Co., Ltd. e-Face (e-Liantong) General Management Platform. It affects an unknown function of the file /manage/resourceUpload/upload.do. The manipulation leads to unauthenticated arbitrary file upload.
An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted malicious request to upload an executable web shell. Due to the lack of proper input validation and authorization checks, the attacker can achieve arbitrary remote code execution (RCE) and gain full control over the underlying server operating system. |
|---|
| ソース | ⚠️ https://ucn9h68n9289.feishu.cn/wiki/SrO0wcxd9i6ByukOizGcIgpBnRd |
|---|
| ユーザー | bigbrother_man (UID 96003) |
|---|
| 送信 | 2026年05月29日 11:23 (4 月 ago) |
|---|
| モデレーション | 2026年06月28日 13:00 (1 month later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 374555 [Hanwang e-Face General Management Platform 6.3.5.4 upload.do file 特権昇格] |
|---|
| ポイント | 20 |
|---|