| Title | The webservice module of mountain flood Disaster monitoring and warning system 2.0 has arbitrary file upload vulnerability |
|---|
| Description | Chengdu Wanjiang Gangli Technology Co., LTD. - The webservice module of Mountain flood Disaster Monitoring and early warning System 2.0 has unauthorized arbitrary file upload vulnerability, and the attacker can upload webshell directly to the target server without logging in.Chengdu Wanjiang Gangli Technology Co., LTD. - The webservice module of Mountain flood Disaster Monitoring and early warning System 2.0 has unauthorized arbitrary file upload vulnerability, and the attacker can upload webshell directly to the target server without logging in. |
|---|
| Source | ⚠️ https://github.com/GUIqizsq/cve/blob/main/upload_2.md |
|---|
| User | GUIqizsq (UID 50449) |
|---|
| Submission | 07/12/2023 11:19 (3 years ago) |
|---|
| Moderation | 07/20/2023 10:28 (8 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 235071 [Chengdu Flash Flood Disaster Monitoring and Warning System File Name ImageStationDataService.asmx random values] |
|---|
| Points | 20 |
|---|