Unrated severityNVD Advisory· Published Dec 15, 2023· Updated Aug 2, 2024
ITPison OMICARD EDM 's SMS - Arbitrary File Upload
CVE-2023-48371
Description
ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
Affected products
1- Range: v6.0.1.5
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.