Shanghai Lingdang Information Technology Lingdang CRM Unrestricted File Upload Vulnerability

A critical vulnerability allowing unrestricted file upload has been identified in Shanghai Lingdang Information Technology Lingdang CRM versions through 8.6.0.0. The issue arises from an unknown function in the file '/crm/weixinmp/index.php', where the 'name' argument can be manipulated to upload files without restriction. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for unrestricted file uploads, which could lead to various attacks depending on the uploaded file type, such as executing malicious scripts or causing a denial-of-service.