CVE-2024-10200

CVE-2024-10200 affects Wellchoose Administrative Management System. The vulnerability is a Path Traversal flaw that allows unauthenticated remote attackers to download arbitrary files from the server. CVSS v3.1 base score 7.5 (HIGH), attack vector NETWORK, no privileges required, no user interact...

CVE-2024-10201

The CVE-2024-10201 entry concerns Wellchoose's Administrative Management System, where improper validation of uploaded file types enables remote attackers with regular privileges to upload and execute webshells. CVSS 3.1 base score 8.8 (HIGH) indicates high impact on confidentiality, integrity, a...

CVE-2024-10202

The CVE-2024-10202 entry concerns the Wellchoose Administrative Management System with an OS Command Injection vulnerability. The available sources state that remote attackers with regular privileges can inject and execute arbitrary OS commands. The issue is labeled high severity (CVSS 3.1: AV:N/...