Skip to content
OpenAdvisories

Product · Guangzhou Red Sea Cloud Computing

Red Sea Cloud eHR

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Redsea Cloud eHR Unauthenticated File Upload RCE via PtFjk.mob

    Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading malicious files through the PtFjk.mob servlet endpoint. Attackers can submit a multipart POST request with a J…