Description (CNA)
The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrestricted file upload (RCE) , that would allow attackers to gain access in the hosting machine.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ALLE INFORMATION CO., LTD. / School Manage System | affected before 2020 |
CWE
No CWE identifiers supplied.
References
- https://www.chtsecurity.com/news/be93c576-e421-489f-9453-a462bdd4c90d
- https://www.twcert.org.tw/tw/cp-132-3532-26d71-1.html
ADP enrichment
No English description supplied.