Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: WellChoose Component: Administrative Management System Clear all filters
TI-2024-09462 CVE-2024-10202 · GHSA-3g9r-f97h-h43m

Wellchoose Administrative Management System - OS Command Injection

Priority MEDIUM 42

Administrative Management System from Wellchoose has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01096 Published 2024-10-21 No fix listed CWE-78
TI-2024-09461 CVE-2024-10201 · GHSA-69pw-gpfc-cjpg

Wellchoose Administrative Management System - Arbitrary File Upload

Priority MEDIUM 41

Administrative Management System from Wellchoose does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload and execute webshells.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.006 Published 2024-10-21 No fix listed CWE-434