RULE(RULE ID:338451)

Rule General Information
Release Date: 2024-10-09
Rule Name: Yonyou Chanjet T+ FileUploadHandler.ashx Arbitrary File Upload Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Yonyou Chanjet T+ is an Internet management software for small and medium-sized industrial, trade and commercial enterprises. It integrates social, mobile, Internet of Things, e-commerce and other elements, provides financial and business integration solutions, and supports multi end applications. There is an arbitrary file upload vulnerability in the FileUploadHandler. ashx system interface of Yonyou Chanjet T+, which allows attackers to upload malicious files to the server, potentially leading to remote code execution, website tampering, or other forms of attacks, seriously threatening system and data security.
Impact: Attackers can upload viruses, Trojans, WebShell, other malicious scripts or pictures containing scripts to the server, and attackers can use these files for subsequent attacks.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.