PT-2024-26566 · Xintongda · Xintongda Oa

Name of the Vulnerable Software and Affected Versions: Xintongda OA version 2023.12.30.1 Description: The issue is related to an arbitrary file upload vulnerability in the File Preview function, allowing attackers to execute arbitrary code by uploading a crafted PDF file. Recommendations: For...