| Title | Shenzhen Dibo Enterprise Risk Management Technology Co., Ltd Dibo Data Decision-Making System 2.7.0 arbitrary file read vulnerability |
|---|
| Description | Shenzhen Dibo Enterprise Risk Management Technology Co., Ltd.’s official website (www.dibcn.com) showcases its expertise in enterprise risk management (ERM), internal control, and digital governance. Founded in 2001 as China’s first government-registered ERM firm, Dibo provides integrated "consulting + software + data" services to state-owned enterprises, listed companies, and public institutions. The site features core offerings like tailored ERM frameworks, the IC&ERM V2.0 intelligent risk early-warning system, and compliance tools integrating with ERP systems. Visitors can access industry case studies (energy, finance, manufacturing) and research outputs including the annual *China Listed Companies Internal Control White Paper*, along with updates on collaborations with the Ministry of Finance and SASAC, enabling quick understanding of Dibo’s ERM capabilities.
However,Dibo Data Decision-Making System has an arbitrary file read vulnerability. |
|---|
| Source | ⚠️ https://github.com/FightingLzn9/vul/blob/main/%E8%BF%AA%E5%8D%9A%E6%95%B0%E6%8D%AE%E5%86%B3%E7%AD%96%E7%B3%BB%E7%BB%9F.md |
|---|
| User | nu11 (UID 81380) |
|---|
| Submission | 09/18/2025 16:42 (10 months ago) |
|---|
| Moderation | 09/26/2025 10:48 (8 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 325981 [Dibo Data Decision Making System up to 2.7.0 common_dep.action.jsp downloadImpTemplet filePath path traversal] |
|---|
| Points | 20 |
|---|