← Database

CVE-2024-46088

CRITICAL CVSS: 9.8 Published: 2024-10-11 Modified: 2026-07-05

Description

An arbitrary file upload vulnerability in the ProductAction.entphone interface of Zhejiang University Entersoft Customer Resource Management System v2002 to v2024 allows attackers to execute arbitrary code via uploading a crafted file.

Affected Platforms

Unknown

Weakness Type

CWE-434

References