CVE-2023-28700 — ITPison OMICARD EDM - Arbitrary File Upload
OMICARD EDM backend system’s file uploading function does not restrict upload of file with dangerous type. A local area network attacker with administrator privileges can exploi…
Published: 2023-06-02 · CVSS: 6.8 · CVSS 3.1
OMICARD EDM backend system’s file uploading function does not restrict upload of file with dangerous type. A local area network attacker with administrator privileges can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7