Security Advisory
CVE-2024-56829
10
CRITICAL
Vulnerability Description
Huang Yaoshi Pharmaceutical Management Software through 16.0 allows arbitrary file upload via a .asp filename in the fileName element of the UploadFile element in a SOAP request to /XSDService.asmx.
Published Date
January 2, 2025
Official Source
NIST NVD Advisory