CVE-2026-112247: fallo de gravedad media en Wuxi Wubang Security Software Five-in-One…
Wuxi Wubang Security Software Five-in-One Safety Production Management Information System Upload Endpoint upload.aspx cross site scripting
Publicada el · Actualizada el
55Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck y tiene prueba de concepto pública.
ssvc Actcvss 5.3epss 0.3%
de la publicación al arma
Publicada en NVD19 oct
VulnCheck19 oct
probabilidad de explotación
0.3%top 83% de las CVE
explotación observada
síVulnCheck
1 exploit(s) público(s)
A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation of the argument NewFile can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:A
Productos afectados
Wuxi Wubang Security Software · Five-in-One Safety Production Management Information SystemPoCs públicas encontradas — 1
cve_referencegithub.com/Rookie506/CVE/issues/1no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.