cbcvebase.

Qingdao Dongsheng Weiye Software Co Ltd Dongsheng Logistics Software vulnerabilities

1 known vulnerability affecting qingdao_dongsheng_weiye_software_co_ltd/dongsheng_logistics_software.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-34163P1CRITICALCVSS 10.0Exploited≤ pre-July 2025 builds2025-08-27
CVE-2025-34163 [CRITICAL] CWE-434 CVE-2025-34163: Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile th Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form-data POST request. This allows remote code execution on the server,
nvd
Qingdao Dongsheng Weiye Software Co Ltd Dongsheng Logistics Software vulnerabilities | cvebase