CVE:CVE-2023-3802
CNNVD:CNNVD-202307-1777
Chengdu Flash Flood Disaster Monitoring and Warning System是一个成都市山洪灾害监测预警系统。
Chengdu Flash Flood Disaster Monitoring and Warning System 2.0版本存在代码问题漏洞，该漏洞源于文件 /Controller/Ajaxfileupload.ashx 上存在未知函数，通过参数file导致不受限制的上传。
solution:Upgrade cdwanjiang flash_flood_disaster_monitoring_and_warning_system to a higher version than 2.0,and avoid the version 2.0