Critical · 9.8 CVE-2024-44758 EUVD-2024-41091GHSA-jpj5-4r47-rch8

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to…

Published Nov 15, 2024 · Updated Nov 27, 2024 · Assigned by mitre

Description

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files.

References

https://github.com/WarmBrew/web_vul/blob/main/M9ERP/M9ERP-upload.md
https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-44758.md