CVE-2023-35850 (published 2023-09-18T02:30:35.609Z)

SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege or a privileged account can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operations or disrupt service.


Affected products: Vendor: SUNNET
Product: WMPro
Versions: V5