U Smart Enjoyment Website
Monthly
Unrestricted file upload in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000 exposes the /Report/Upload/UploadFormImg.ashx endpoint to unauthenticated remote file submission without file-type validation. An unauthenticated network attacker can upload arbitrary file types - including ASP.NET script files such as .aspx webshells - potentially chaining the upload into remote code execution on the underlying IIS server if the upload directory permits script execution. A public proof-of-concept exploit has been disclosed via a Feishu document, and no CISA KEV listing has been identified at time of analysis.
Unrestricted file upload in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000 exposes the /Report/Upload/UploadFormImg.ashx endpoint to unauthenticated remote file submission without file-type validation. An unauthenticated network attacker can upload arbitrary file types - including ASP.NET script files such as .aspx webshells - potentially chaining the upload into remote code execution on the underlying IIS server if the upload directory permits script execution. A public proof-of-concept exploit has been disclosed via a Feishu document, and no CISA KEV listing has been identified at time of analysis.