| |
Vulnerability CVE-2023-28700
Published: 2023-06-02
| Description: |
OMICARD EDM backend system??s file uploading function does not restrict upload of file with dangerous type. A local area network attacker with administrator privileges can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service. |
Type:
CWE-434 (Unrestricted Upload of File with Dangerous Type)
References: |
https://www.twcert.org.tw/tw/cp-132-7144-b7536-1.html
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
