Submit #152562: Tongda OA v11.10 has unauthorized arbitrary file upload vulnerabilityinfo

TitleTongda OA v11.10 has unauthorized arbitrary file upload vulnerability
DescriptionA serious vulnerability exists in Accessible OA v11.10. An attacker can directly upload files to the target server in an unauthorized manner or run any command to achieve the rce effect.A serious vulnerability exists in Accessible OA v11.10. An attacker can directly upload files to the target server in an unauthorized manner or run any command to achieve the rce effect.A serious vulnerability exists in Accessible OA v11.10. An attacker can directly upload files to the target server in an unauthorized manner or run any command to achieve the rce effect.
Source⚠️ https://github.com/RCEraser/cve/blob/main/tongda.md
User
 RCEraser (UID 45540)
Submission05/05/2023 16:18 (3 years ago)
Moderation05/16/2023 16:33 (11 days later)
StatusAccepted
VulDB entry229149 [Tongda OA 11.10 GatewayController.php actionGetdata unrestricted upload]
Points20

Interested in the pricing of exploits?

See the underground prices here!