CVE-2024-57337

M2Soft CROWNIX Report & ERS is affected by an arbitrary file upload vulnerability within the opcode 500 functionality. This flaw allows an attacker to execute arbitrary code by supplying a crafted file. Affected versions include v5.x to v5.5.14.1070 , v7.x to v7.4.3.960 , and v8.x to v8.2.0.345 ....

CVE-2024-57337: Improper Neutralization of Special Elements used in a Command

An arbitrary file upload vulnerability in the opcode 500 functionality of M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.960, and v8.x to v8.2.0.345 allows attackers to execute arbitrary code via supplying a crafted file...