CVE:CVE-2023-3626
CNNVD:CNNVD-202307-804
Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System是Suncreate公司的一个山洪灾害预防监测和预警系统。
Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System 20230706及之前版本存在代码问题漏洞，该漏洞源于文件/Duty/AjaxHandle/UpLoadFloodPlanFile.ashx的参数Filedata会导致不受限制的上传。
solution:Upgrade istrong mountain_flood_disaster_prevention_monitoring_and_early_warning_system to a higher version than 20230706,and avoid the version (,20230706]