DWSurvey 代码注入漏洞

DWSurvey is a questionnaire system written in Java. DWSurvey v3.2.0 suffers from a code injection vulnerability that could allow an attacker to perform Remote Command Execution RCE via the component /sysuser/SysPropertyAction.java...