CVE-2024-13984

QiAnXin TianQing Management Center versions up to and including 6.7.0.4130 contain a path traversal vulnerability in the rptsvr component that allows unauthenticated attackers to upload files to arbitrary locations on the server. The /rptsvr/upload endpoint fails to sanitize the filename paramete...

CVE-2024-13984 Qi'anxin TianQing Management Center rptsvr Arbitrary File Upload

QiAnXin TianQing Management Center versions up to and including 6.7.0.4130 contain a path traversal vulnerability in the rptsvr component that allows unauthenticated attackers to upload files to arbitrary locations on the server. The /rptsvr/upload endpoint fails to sanitize the filename paramete...

QiAnXin TianQing Management Center 安全漏洞

QiAnXin TianQing Management Center TianQing Terminal Security Management System is a terminal security management system from QiAnXin, China. A security vulnerability exists in QiAnXin TianQing Management Center version 6.7.0.4130 and prior versions, which originates from path traversal and could...

PT-2025-34941 · Qi Anxin · Qianxin Tianqing Management Center

Name of the Vulnerable Software and Affected Versions: QiAnXin TianQing Management Center versions up to and including 6.7.0.4130 Description: QiAnXin TianQing Management Center versions up to and including 6.7.0.4130 contain a path traversal vulnerability in the rptsvr component. Unauthenticated...