EUVD-2024-54923

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Unauthenticated path traversal via filename in LiveBOS UploadFile.do enables remote code execution.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-13981	29 Aug 202521:02	–	circl
CNNVD	Apex LiveBOS 安全漏洞	27 Aug 202500:00	–	cnnvd
CVE	CVE-2024-13981	27 Aug 202521:25	–	cve
Cvelist	CVE-2024-13981 LiveBos UploadFile.do Arbitrary File Upload	27 Aug 202521:25	–	cvelist
NVD	CVE-2024-13981	27 Aug 202522:15	–	nvd
Positive Technologies	PT-2025-34940 · Livebos · Livebos	27 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-13981	30 Aug 202518:16	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2024-13981	23 Aug 202400:00	–	vulncheck_kev
Vulnrichment	CVE-2024-13981 LiveBos UploadFile.do Arbitrary File Upload	27 Aug 202521:25	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "a48ef69f-f5b1-3156-9e5d-f765bd453b35",
        "vendor": {
          "name": "Fujian Apex Software Co. Ltd."
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ba72634e-5e1f-3b39-9991-d52e29962d28",
        "product": {
          "name": "LiveBOS"
        },
        "product_version": "* ≤pre-August 2024 builds"
      }
    ]
  }
]

Source	Link
cn-sec	www.cn-sec.com/archives/3041179.html
axsec	www.axsec.blog.csdn.net/article/details/140847466
github	www.github.com/folio2008/POC_wy876/blob/main/LiveBOS/%E7%81%B5%E5%8A%A8%E4%B8%9A%E5%8A%A1%E6%9E%B6%E6%9E%84%E5%B9%B3%E5%8F%B0%28LiveBOS%29%E7%B3%BB%E7%BB%9FUploadFile.do%E6%8E%A5%E5%8F%A3%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E%28XVE-2023-21708%29.md
blog	www.blog.csdn.net/weixin_53009585/article/details/140853891
blog	www.blog.csdn.net/jingke666/article/details/140855251
apexsoft	www.apexsoft.com.cn/platform/index.html
vulncheck	www.vulncheck.com/advisories/livebos-uploadfile-arbitrary-file-upload

03 Oct 2025 20:07Current

6.6Medium risk

Vulners AI Score6.6

CVSS 410

EPSS0.01812

SSVC