| Título | Tsinghua Unigroup Electronic Archives System 3.2.210802(62532) Unrestricted Upload |
|---|
| Descrição | A critical security vulnerability has been identified in Tsinghua Unigroup Electronic Archives System 3.2.210802 (62532).
Due to improper validation in the file upload mechanism, a remote attacker can upload arbitrary files without authentication.
Successful exploitation may lead to full system compromise, including arbitrary code execution, data tampering, or persistent backdoor deployment.
This vulnerability poses a severe risk to affected deployments and requires immediate remediation. |
|---|
| Fonte | ⚠️ https://github.com/luoye197-prog/ziguang-fileupload |
|---|
| Utilizador | lanmeik (UID 95270) |
|---|
| Submissão | 07/02/2026 13h21 (há 4 meses) |
|---|
| Moderação | 18/02/2026 14h36 (11 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 346475 [Tsinghua Unigroup Electronic Archives System até 3.2.210802(62532) uploadFile.html Ficheiro Elevação de Privilégios] |
|---|
| Pontos | 20 |
|---|