Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-20174
HistoryFeb 23, 2022 - 12:00 a.m.

Zfaka input validation error vulnerability

2022-02-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
zfaka
input validation
vulnerability
file upload
remote command execution
security

EPSS

0.009

Percentile

82.9%

An input validation error vulnerability exists in Zfaka, a free, secure, stable and efficient card issuance system, which stems from the product’s backend file upload function that does not validate files. An attacker could cause remote command execution through this vulnerability.

EPSS

0.009

Percentile

82.9%

Related for CNVD-2022-20174