Unrestricted File Upload Vulnerability in Lingdang CRM by Shanghai Lingdang Information Technology
CVE-2025-0463

Currently unrated

Key Information:

Vendor

Shanghai Lingdang Information Technology

Status
Lingdang CRM
Vendor
CVE Published:
14 January 2025

What is CVE-2025-0463?

A vulnerability exists in Lingdang CRM, where an unknown function in the file index.php allows for the unrestricted upload of files. This issue can be exploited remotely and poses significant security risks as it has already been disclosed publicly. The affected versions include Lingdang CRM up to 8.6.0.0, and the vendor has not responded to the notification regarding this critical issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/BxYQ/ld/blob/main/File_Upload_vul.doc
https://vuldb.com/?ctiid.291480
https://vuldb.com/?id.291480

Timeline

  • Vulnerability published

JSON
.