medium4.7
CVE-2024-9278
A vulnerability, which was classified as critical, has been found in HuankeMao SCRM up to 0.0.3.
Impact
A vulnerability, which was classified as critical, has been found in HuankeMao SCRM up to 0.0.3. Affected by this issue is the function upload_domain_verification_file of the file WxkConfig.php of the component Administrator Backend. The manipulation of the argument domain_verification_file leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Product | Affected versions |
|---|---|
| HuankeMao SCRM | before 0.0.3. |
Versions were read from the advisory text. No structured product data has been published for this record yet.