Vulnerabilities

TI-2024-28576 CVE-2024-42677 · GHSA-53h7-ghj7-7gh9

An issue in Huizhi enterprise resource management system v.1.0 and before allows a local…

LOW 24

An issue in Huizhi enterprise resource management system v.1.0 and before allows a local attacker to obtain sensitive information via the /nssys/common/filehandle.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0027 Published 2024-08-15 No fix listed CWE-922

TI-2024-28575 CVE-2024-42676 · GHSA-mxxm-vx4c-x8w7

File Upload vulnerability in Huizhi enterprise resource management system v.1.0 and…

MEDIUM 42

File Upload vulnerability in Huizhi enterprise resource management system v.1.0 and before allows a remote attacker to execute arbitrary code via the /nssys/common/Upload.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01073 Published 2024-08-15 No fix listed CWE-434

Vulnerabilities

Filters

An issue in Huizhi enterprise resource management system v.1.0 and before allows a local…

File Upload vulnerability in Huizhi enterprise resource management system v.1.0 and…