CVE-2025-11948 — Excellent Infotek｜Document Management System - Arbitrary File Upload

CVE-2025-11948

Excellent Infotek｜Document Management System - Arbitrary File Upload PUBLISHED

Description (CNA)

Document Management System developed by Excellent Infotek has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

Affected (CNA)

Vendor / product	Versions
Excellent Infotek / Document Management System	affected 0

CWE

CWE-434

References

https://www.twcert.org.tw/tw/cp-132-10452-72cb6-1.html
https://www.twcert.org.tw/en/cp-139-10453-43e63-2.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://www.chtsecurity.com/news/3575ad9c-31f4-49de-8bc4-de85bb2eed39