CVE:CVE-2023-3798
CNNVD:CNNVD-202307-1776
Chengdu Flash Flood Disaster Monitoring and Warning System是一个成都市山洪灾害监测预警系统。
Chengdu Flash Flood Disaster Monitoring and Warning System 2.0版本存在代码问题漏洞，该漏洞源于文件/App_Resource/UEditor/server/upload.aspx的参数file会导致不受限制的上传。
solution:Upgrade cdwanjiang flash_flood_disaster_monitoring_and_warning_system to a higher version than 2.0,and avoid the version 2.0