CVE-2023-48394 (published 2023-12-15T09:25:18.105Z)
Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user privilege can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.
Affected products: Vendor: Kaifa Technology
Product: WebITR
Versions: 2_1_0_19