Wellchoose

Administrative Management System

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-10202

  • EPSS 3.21%
  • Veröffentlicht 21.10.2024 04:15:03
  • Zuletzt bearbeitet 24.10.2024 13:55:46

Administrative Management System from Wellchoose has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.

7.5

CVE-2024-10200

  • EPSS 0.54%
  • Veröffentlicht 21.10.2024 04:15:02
  • Zuletzt bearbeitet 24.10.2024 13:57:28

Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to download arbitrary files on the server.

8.8

CVE-2024-10201

  • EPSS 1.11%
  • Veröffentlicht 21.10.2024 04:15:02
  • Zuletzt bearbeitet 24.10.2024 13:56:56

Administrative Management System from Wellchoose does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload and execute webshells.