RULE(RULE ID:333525)

Rule General Information
Release Date: 2021-05-08
Rule Name: Coremail Arbitrary File Upload Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Coremail belongs to the brand of Guangdong Yingshi Computer Technology Co., Ltd. and is a professional email software product with independent intellectual property rights. There is an arbitrary file upload vulnerability in Coremail, which allows attackers to upload webshells and cause remote code execution.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.