| 标题 | vendor https://www.lingxing.com/ v2 remote code execution |
|---|
| 描述 | A critical security vulnerability has been identified in the file upload functionality of the .NET system. This vulnerability allows unauthenticated users to upload arbitrary files, which can lead to remote code execution (RCE) and potentially grant attackers full control over the server. |
|---|
| 来源 | ⚠️ https://github.com/666lail/report/blob/main/tmp/fileUpload_1.md |
|---|
| 用户 | 207556249 (UID 81808) |
|---|
| 提交 | 2025-04-01 16時00分 (2 年前) |
|---|
| 管理 | 2025-04-14 00時14分 (12 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 304592 [Lingxing ERP 2 FileUpload.ashx?method=DoUpload file 权限提升] |
|---|
| 积分 | 17 |
|---|