← Back to CVE List
CVE-2024-56829
Huang Yaoshi Pharmaceutical Management Software through 16.0 allows arbitrary file upload via a .asp filename in the fileName element of the UploadFile element in a SOAP request to /XSDService.asmx.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt