CVE-2024-57337 Information

Description

An arbitrary file upload vulnerability in the opcode 500 functionality of M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070 v7.x to v7.4.3.960 and v8.x to v8.2.0.345 allows attackers to execute arbitrary code via supplying a crafted file.

Reference

https://www.m2soft.co.kr/sub/board/news.asp?mode=view&idx=2411