14 matches found
CVE-2025-3552
A vulnerability was found in Lingxing ERP 2. It has been classified as critical. This affects an unknown part of the file /Api/TinyMce/UploadAjax.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2025-3551
A vulnerability was found in Lingxing ERP 2 and classified as critical. Affected by this issue is the function DoUpload of the file /Api/FileUpload.ashx?method=DoUpload. The manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit has been...
CVE-2025-3552
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The vendor was not able to verify the existence of the original vulnerability report and the researche...
CVE-2025-3552
CVE-2025-3552 is rejected/not used; this CVE entry does not represent an active vulnerability.
CVE-2025-3551
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The vendor was not able to verify the existence of the original vulnerability report and the researche...
CVE-2025-3551
CVE-2025-3551 is rejected/not used; not an active vulnerability.
编号撤回
Lingxing ERP is a cross-border e-commerce system from China-based Lingxing Lingxing. This CVE number has been withdrawn...
PT-2025-16203 · Unknown · Lingxing Erp
Name of the Vulnerable Software and Affected Versions: Lingxing ERP version 2 Description: A critical issue was found in the function DoUpload of the file /Api/FileUpload.ashx?method=DoUpload. The manipulation of the argument File leads to unrestricted upload. This issue can be exploited remotely...
PT-2025-16204
Name of the Vulnerable Software and Affected Versions: Lingxing ERP version 2 Description: A critical issue has been identified, affecting an unknown part of the file /Api/TinyMce/UploadAjax.ashx. The manipulation of the File argument leads to unrestricted upload. This issue can be exploited...