CVE-2025-5380 ashinigit 天青一白 XueShengZhuSu 学生住宿管理系统 Image File Upload upload path traversal

A vulnerability, which was classified as critical, has been found in ashinigit 天青一白 XueShengZhuSu 学生住宿管理系统 up to 4d3f0ada0e71482c1e51fd5f5615e5a3d8bcbfbb. This issue affects some unknown processing of the file /upload/ of the component Image File Upload. The manipulation of the argument File lead...

PT-2025-23405 · Unknown · Xueshengzhusu

Name of the Vulnerable Software and Affected Versions: ashinigit XueShengZhuSu versions up to 4d3f0ada0e71482c1e51fd5f5615e5a3d8bcbfbb Description: A critical issue has been found in the Image File Upload component of ashinigit XueShengZhuSu, affecting some unknown processing of the file /upload/...

XueShengZhuSu 路径遍历漏洞

XueShengZhuSu is a software used for student accommodation management by a Chinese ashinigit individual developer. A path traversal vulnerability exists in XueShengZhuSu, which is caused by a path traversal vulnerability due to misuse of the File parameter in the file /upload/...