Dongsheng Logistics Software vulnerabilities
1 known vulnerability in Dongsheng Logistics Software from Qingdao Dongsheng Weiye Software. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest first
- 10.0 Critical severity
Dongsheng Logistics Software: Unrestricted Upload of File with Dangerous Type
Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a cr