4 matches found
CVE-2024-35595
An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2024-35595
An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2024-35595
An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2024-35595
The Xintongda OA (collaborative office OA system) version v2023.12.30.1 contains an arbitrary file upload vulnerability within its File Preview function. An attacker can exploit this by uploading a specially crafted PDF file to achieve arbitrary code execution . To mitigate this risk, it is recom...