Security Advisory
CVE-2024-56829
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Huang Yaoshi Pharmaceutical Management Software through 16.0 allows arbitrary file upload via a .asp filename in the fileName element of the UploadFile element in a SOAP request to /XSDService.asmx.