ZONG YU Okcat Parking Management Platform Arbitrary File Upload Vulnerability Allowing Remote Code Execution
Vulnerability
A vulnerability allowing arbitrary file upload has been identified in the web management interface of the Okcat Parking Management Platform by ZONG YU. This vulnerability allows unauthenticated remote attackers to upload and execute web shell backdoors, leading to arbitrary code execution on the server.
Impact
Exploitation of this vulnerability allows for arbitrary code execution on the server where the Okcat Parking Management Platform is hosted.
Remediation
The affected product is no longer maintained. It is recommended to evaluate and adopt alternative products.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
7.4remediation
0.0relevance
0.0threat
0.1urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.