💣Exploit CVE-2024-11984 - Corporate Training Management System Unrestricted File Upload Remote Code Execution Vulnerability

[Maksim]

CVE ID : CVE-2024-11984
Published : Dec. 19, 2024, 4:15 a.m. | 56 minutes ago
Description : A unrestricted upload of file with dangerous type vulnerability in epaper draft function in Corporate Training Management System before 10.13 allows remote authenticated users to bypass file upload restrictions and perform arbitrary system commands with SYSTEM privilege via a crafted ZIP file.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.