CVE-2024-33786: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-33786

An arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-33786

The Zhongcheng Kexin Ticketing Management Platform version 20.04 is susceptible to an arbitrary file upload vulnerability (CWE-434). This flaw allows an attacker to execute arbitrary code by uploading a crafted file . While the risk is significant with a CVSS 3.1 score of 9.8 , no specific exploi...

PT-2024-25479 · Unknown · Zhongcheng Kexin Ticketing Management Platform

Name of the Vulnerable Software and Affected Versions: Zhongcheng Kexin Ticketing Management Platform version 20.04 Description: The issue allows attackers to execute arbitrary code via uploading a crafted file, exploiting an arbitrary file upload vulnerability. Recommendations: For Zhongcheng...