CyberRota Analysis
AI-GeneratedAn unauthenticated arbitrary file upload vulnerability in Feng Office 3.11.13.11 allows remote attackers to upload malicious files to the web-accessible /tmp/ directory, potentially leading to remote code execution or further exploitation. Organizations using this version of Feng Office should prioritize patching this critical vulnerability to mitigate the risk of unauthorized access and data compromise. Immediate action is recommended for any entity relying on affected Office products to safeguard their systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers to upload malicious files (such as .html) to the web-accessible /tmp/ directory.