RULE(RULE ID:338326)

Rule General Information
Release Date: 2024-08-20
Rule Name: Cailsoft Enterprise Management System SubmitUploadify Arbitrary File Upload Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Cailsoft Enterprise Management System is a software system that provides a total management solution for enterprises. An arbitrary file upload vulnerability in the SubmitUploadify interface of the Cailsoft Enterprise Management system could allow an unauthenticated attacker to execute arbitrary code on the server.
Impact: Attackers can upload viruses, Trojans, WebShell, other malicious scripts or pictures containing scripts to the server, and attackers can use these files for subsequent attacks.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.