Official Document Management System
Monthly
Arbitrary file upload in 2100 Technology's Official Document Management System (all versions before 5.0.105) enables authenticated remote attackers to upload and execute web shell backdoors, achieving full arbitrary code execution on the underlying server. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L) confirms network-accessible exploitation requiring only a low-privileged account, with total impact across confidentiality, integrity, and availability. No public exploit code or active exploitation has been identified at time of analysis, and a vendor patch is available.
Arbitrary file upload in 2100 Technology's Official Document Management System (all versions before 5.0.105) enables authenticated remote attackers to upload and execute web shell backdoors, achieving full arbitrary code execution on the underlying server. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L) confirms network-accessible exploitation requiring only a low-privileged account, with total impact across confidentiality, integrity, and availability. No public exploit code or active exploitation has been identified at time of analysis, and a vendor patch is available.