Description
An arbitrary file upload vulnerability in the ProductAction.entphone interface of Zhejiang University Entersoft Customer Resource Management System v2002 to v2024 allows attackers to execute arbitrary code via uploading a crafted file.
Critical · 9.8
CVE-2024-46088
EUVD-2024-41785GHSA-69v8-467r-vfjf
An arbitrary file upload vulnerability in the ProductAction.entphone interface of Zhejiang University Entersoft Customer Resource Managemen…
Published Oct 11, 2024 · Updated Jul 5, 2026 · Assigned by mitre