Skip to content
OpenAdvisories

Product · DigiWin

ERP

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2025-2705

    Digiwin ERP FileUploadApi.ashx DoWebUpload unrestricted upload

    A vulnerability classified as critical has been found in Digiwin ERP 5.1. Affected is the function DoUpload/DoWebUpload of the file /Api/FileUploadApi.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attac…

    DigiWin ERP