PT-2025-12571

Name of the Vulnerable Software and Affected Versions Digiwin ERP version 5.1 Description A critical issue has been discovered, affecting the DoUpload/DoWebUpload function of the /Api/FileUploadApi.ashx file. The manipulation of the File argument leads to unrestricted upload. This issue can be...

CVE-2025-2705: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in Digiwin ERP 5.1. Affected is the function DoUpload/DoWebUpload of the file /Api/FileUploadApi.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-1165: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in Lumsoft ERP 8. Affected is the function DoUpload/DoWebUpload of the file /Api/FileUploadApi.ashx. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been...