CVE-2025-65897

zdhweb is a data collection, processing, monitoring, scheduling, and management platform. In zdhweb thru 5.6.17, insufficient validation of file upload paths in the application allows an authenticated user to write arbitrary files to the server file system, potentially overwriting existing files...

CVE-2025-65897

The data collection and management platform zdh_web versions through 5.6.17 is vulnerable to an arbitrary file write flaw. The root cause is insufficient validation of file upload paths , which allows an authenticated user to write files to the server file system. This vulnerability could lead to...

Arbitrary File Upload

dilab/resumable.php is vulnerable to Arbitrary File Upload. The vulnerability arises due to a lack of file upload path validation within Resumable.php. An attacker can arbitrarily upload any non existing file on the filesystem...