Lingxing ERP 2 UploadAjax.ashx File unrestricted upload 🚫 [False Positive]

Noticeinfo

⚠️ This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all. The vendor was not able to verify the existence of the original vulnerability report and the researcher was not able to provide further proof.

Productinfo

Type

• Enterprise Resource Planning Software

Vendor

• Lingxing

Name

• ERP

Version

• 2

Timelineinfo

04/13/2025 🔍
04/14/2025 +0 days 🔍
05/05/2025 +21 days 🔍

Sourcesinfo

Advisory: github.com
False Positive: Yes
Disputed: 🔍

CVE: CVE-2025-3552 (🔍)
GCVE (CVE): GCVE-0-2025-3552
GCVE (VulDB): GCVE-100-304593
scip Labs: https://www.scip.ch/en/?labs.20161013

Entryinfo

Created: 04/14/2025 00:19
Updated: 05/05/2025 13:29
Changes: 04/14/2025 00:19 (57), 04/14/2025 10:46 (30), 04/25/2025 15:37 (3), 04/25/2025 17:07 (1), 05/05/2025 13:29 (2)
Complete: 🔍
Submitter: 207556249
Cache ID: 216::103

Submitinfo

Accepted

• Submit #547881: vendor https://www.lingxing.com/ v2 Remote Code Execution (by 207556249)

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion

Might our Artificial Intelligence support you?

Check our Alexa App!