CVE-2024-57337

The M2Soft CROWNIX Report & ERS software is affected by an arbitrary file upload vulnerability within the opcode 500 functionality. This flaw allows an attacker to achieve arbitrary code execution by supplying a crafted file. The affected versions include v5.x to v5.5.14.1070 , v7.x to v7.4.3.960...