← voltar
CVE-2025-12867

Hundred Plus|EIP Plus - Arbitrary File Uplaod

CVSS 8.6 HIGHEPSS 0.6%CWE-434
EIP Plus developed by Hundred Plus has an Arbitrary File Uplaod vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Hundred Plus · EIP Plus

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →