PT-2025-26995 · Fanwei · Fanwei E-Office

Pikpikcu

·

Published

2025-06-26

·

Updated

2025-11-17

·

CVE-2025-34046

CVSS v4.0

10

Critical

VectorAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions: Fanwei E-Office versions <= 9.4
Description: An unauthenticated file upload issue exists in the web management interface, affecting the "/general/index/UploadFile.php" endpoint. This endpoint improperly validates uploaded files when invoked with certain parameters, such as uploadType=eoffice logo or uploadType=theme. An attacker can exploit this by sending a crafted HTTP POST request to upload arbitrary files without authentication, potentially enabling remote code execution on the affected server. This could lead to the complete compromise of the web application and the underlying system.
Recommendations: For Fanwei E-Office versions <= 9.4, as a temporary workaround, consider disabling the "/general/index/UploadFile.php" endpoint until a patch is available. Restrict access to this endpoint to minimize the risk of exploitation. Avoid using the uploadType parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Unrestricted File Upload

Code Injection

Weakness Enumeration

CWE-434CWE-94

Related Identifiers

CVE-2025-34046

Affected Products

Fanwei E-Office