Gửi #547878: vendor https://www.lingxing.com/ v2 remote code executionthông tin

tiêu đềvendor https://www.lingxing.com/ v2 remote code execution
Mô tảA critical security vulnerability has been identified in the file upload functionality of the .NET system. This vulnerability allows unauthenticated users to upload arbitrary files, which can lead to remote code execution (RCE) and potentially grant attackers full control over the server.
Nguồn⚠️ https://github.com/666lail/report/blob/main/tmp/fileUpload_1.md
Người dùng
 207556249 (UID 81808)
Đệ trình01/04/2025 16:00 (cách đây 2 những năm)
Kiểm duyệt14/04/2025 00:14 (12 days later)
Trạng tháiđược chấp nhận
Mục VulDB304592 [Lingxing ERP 2 FileUpload.ashx?method=DoUpload file nâng cao đặc quyền]
điểm17

Want to stay up to date on a daily basis?

Enable the mail alert feature now!