← Database

CVE-2024-42676

HIGH CVSS: 8.8 Published: 2024-08-15 Modified: 2026-06-17

Description

File Upload vulnerability in Huizhi enterprise resource management system v.1.0 and before allows a remote attacker to execute arbitrary code via the /nssys/common/Upload. Aspx? Action=DNPageAjaxPostBack component

Affected Platforms

Isellerpal Enterprise Resource Management System

Weakness Type

CWE-434, CWE-434

References