Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Kordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Upload
Vulnerability Description
An unauthenticated arbitrary file upload vulnerability exists in Kordil EDMS v2.2.60rc3. The application exposes an upload endpoint (users_add.php) that allows attackers to upload files to the /userpictures/ directory without authentication. This flaw enables remote code execution by uploading a PHP payload and invoking it via a direct HTTP request.
CVSS Information
N/A
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
Kordil EDMS 安全漏洞
Vulnerability Description
Kordil EDMS是土耳其Kordil公司的一套开源的电子文档管理系统。该系统支持文档管理和文档控制等功能。 Kordil EDMS v2.2.60rc3版本存在安全漏洞，该漏洞源于未验证上传文件类型，可能导致任意文件上传和远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A