Lingxing ERP 2 FileUpload.ashx?method=DoUpload File unrestricted upload 🚫 [False Positive]

Noticeinfo

⚠️ This issue appears to be a false-positive. Please verify the sources mentioned and consider not using this entry at all. The vendor was not able to verify the existence of the original vulnerability report and the researcher was not able to provide further proof.

Productinfo

Type

• Enterprise Resource Planning Software

Vendor

• Lingxing

Name

• ERP

Version

• 2

Timelineinfo

04/13/2025 🔍
04/14/2025 +0 days 🔍
05/05/2025 +21 days 🔍

Sourcesinfo

Advisory: github.com
False Positive: Yes
Disputed: 🔍

CVE: CVE-2025-3551 (🔍)
GCVE (CVE): GCVE-0-2025-3551
GCVE (VulDB): GCVE-100-304592
scip Labs: https://www.scip.ch/en/?labs.20161013

Entryinfo

Created: 04/14/2025 00:19
Updated: 05/05/2025 13:29
Changes: 04/14/2025 00:19 (58), 04/14/2025 07:36 (30), 04/25/2025 15:37 (3), 04/25/2025 17:07 (1), 05/05/2025 13:29 (2)
Complete: 🔍
Submitter: 207556249
Cache ID: 216::103

Submitinfo

Accepted

• Submit #547878: vendor https://www.lingxing.com/ v2 remote code execution (by 207556249)

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion

Interested in the pricing of exploits?

See the underground prices here!