| |
Vulnerability CVE-2023-48394
Published: 2023-12-15
| Description: |
Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user privilege can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service. |
References: |
https://www.twcert.org.tw/tw/cp-132-7624-d0300-1.html
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
