Submit #547881: vendor https://www.lingxing.com/ v2 Remote Code Executioninfo

Titlevendor https://www.lingxing.com/ v2 Remote Code Execution
DescriptionAn unauthenticated file upload vulnerability has been identified in the .NET system. This vulnerability allows an attacker to upload arbitrary files, including potentially malicious ASPX files, which can lead to remote code execution and full server compromise.
Source⚠️ https://github.com/666lail/report/blob/main/tmp/fileUpload_3.md
User
 207556249 (UID 81808)
Submission04/01/2025 16:04 (1 Year ago)
Moderation04/14/2025 00:14 (12 days later)
StatusAccepted
VulDB entry304593 [Lingxing ERP 2 UploadAjax.ashx File unrestricted upload]
Points17

Want to know what is going to be exploited?

We predict KEV entries!