| Package | Affected versions | Patched versions |
|---|---|---|
| teamwork management system | ≤ 2.28.0 |
A vulnerability was detected in xiweicheng TMS up to 2.28.0. Affected by this issue is the function Upload of the file src/main/java/com/lhjz/portal/controller/FileController.java. The manipulation of the argument filename results in unrestricted upload. The attack may be performed from remote. The exploit is now public and may be used.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free