Description
An arbitrary file upload vulnerability in the ShopOrderImportController.java component of qihang-wms commit 75c15a allows attackers to execute arbitrary code via uploading a crafted file.
High · 7.3
CVE-2026-37430
EUVD-2026-29949GHSA-xf7x-xwx7-4g6h
An arbitrary file upload vulnerability in the ShopOrderImportController.java component of qihang-wms commit 75c15a allows attackers to exec…
Published May 13, 2026 · Updated May 14, 2026 · Assigned by mitre