GobyVuls/GJP_SelectImage.aspx_file_upload_vulnerability.md

1.1 KiB

GJP SelectImage.aspx file upload vulnerability

Vulnerability GJP SelectImage.aspx file upload vulnerability
Chinese name 管家婆订货易在线商城 SelectImage.aspx 文件上传漏洞
CVSS core 9.8
FOFA Query (click to view the results directly) title="订货易"
Number of assets affected 2617
Description Renwoxing took the lead in launching the Guanjiapo purchase, sales, inventory and financial integration software for small and medium-sized enterprises.There is a SelectImage.aspx arbitrary file upload vulnerability in the Guanjiapo Ordering Online Mall. An attacker can use this vulnerability to control the entire system, ultimately causing the system to be in an extremely unsafe state.
Impact An attacker can take control of the entire system through this vulnerability, ultimately leaving the system in an extremely unsafe state.