Wellchoose AMS Vulnerability: Webshells Can Be Uploaded and Executed

CVE-2024-10201

What is CVE-2024-10201?

The Administrative Management System developed by Wellchoose is susceptible to a vulnerability that arises from improper validation of uploaded file types. This flaw enables remote attackers with standard user privileges to upload malicious files, such as webshells, which may subsequently allow them to execute unauthorized commands on the server. Organizations using this software should be aware of the risk posed by this weakness and take necessary precautions to mitigate potential exploitation.

References