CVE-2023-48371 | BDVDB-2026-219481 Detail
ITPisonOMICARD EDM 's SMS
Description#
ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
Impact#
CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs
Weaknesses#
- CWE-434 Unrestricted Upload of File with Dangerous Type
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.