CVE-2024-42677

An issue in Huizhi enterprise resource management system v.1.0 and before allows a local attacker to obtain sensitive information via the /nssys/common/filehandle. Aspx component...

PT-2024-30102 · Huizhi · Huizhi

Name of the Vulnerable Software and Affected Versions: Huizhi enterprise resource management system versions 1.0 and earlier Description: The issue allows a local attacker to obtain sensitive information via the "/nssys/common/filehandle.aspx" component. A local attacker can exploit this to gain...

Huizhi enterprise resource management system 安全漏洞

Huizhi enterprise resource management system is an enterprise resource planning ERP system from Shenzhen Huizhi Software Development Co. A security vulnerability exists in Huizhi enterprise resource management system version v.1.0, which originates from the /nssys/common/filehandle.aspx component...