Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-57337 EUVD-2025-16195GHSA-wxg6-4cwm-4rjf

An arbitrary file upload vulnerability in the opcode 500 functionality of M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.…

Published May 28, 2025 · Updated May 30, 2025 · Assigned by mitre

Description

An arbitrary file upload vulnerability in the opcode 500 functionality of M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.960, and v8.x to v8.2.0.345 allows attackers to execute arbitrary code via supplying a crafted file.

References