PT-2026-53229 · Hanwang · E-Face General Management Platform

Bigbrother_Man · Publicado 2026-06-29 · Atualizado 2026-06-29 · CVE-2026-13547

NVD

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown processing of the file /manage/resourceUpload/upload.do. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Correção

Improper Access Control

Unrestricted File Upload

Enumeração de Fraquezas

CWE-284

CWE-434

Identificadores relacionados

CVE-2026-13547

Produtos afetados

E-Face General Management Platform

Referências · 6

• 🔥 https://ucn9h68n9289.feishu.cn/wiki/SrO0wcxd9i6ByukOizGcIgpBnRd · Exploit
• https://vuldb.com/cve/CVE-2026-13547 · Nota
• https://vuldb.com/vuln/374555/cti · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-13547 · Nota de Segurança
• https://vuldb.com/submit/842646 · Nota
• https://vuldb.com/vuln/374555 · Nota