CVE:CVE-2023-3623
CNNVD:CNNVD-202307-782
Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System是Suncreate公司的一个山洪灾害预防监测和预警系统。
Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System存在代码问题漏洞，该漏洞源于组件 Duty Module 中的文件 /Duty/AjaxHandle/UploadHandler.ashx 存在一些未知函数，通过参数 Filedata 导致不受限制的上传。
solution:Upgrade istrong mountain_flood_disaster_prevention_monitoring_and_early_warning_system to a higher version than 2023-07-04,and avoid the version (,2023-07-04]