CVE-2024-6117 — Hamastar MeetingHub Paperless Meetings - Unrestricted Upload of File with Dangerous Type

CVE-2024-6117

Hamastar MeetingHub Paperless Meetings - Unrestricted Upload of File with Dangerous Type PUBLISHED

Description (CNA)

A Unrestricted upload of file with dangerous type vulnerability in meeting management function in Hamastar MeetingHub Paperless Meetings 2021 allows remote authenticated users to perform arbitrary system commands via a crafted ASP file.

Affected (CNA)

Vendor / product	Versions
Hamastar Technology / MeetingHub Paperless Meetings	affected 2021

CWE

CWE-434

References

https://zuso.ai/advisory/za-2024-02

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.