TalentSys Inka.Net Unrestricted File Upload Vulnerability Allowing Command Injection

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in TalentSys Consulting Information Technology Industry Inc. Inka.Net, affecting versions prior to 6.7.1. This vulnerability allows for command injection, potentially enabling cyber attackers to execute malicious commands on the server.

Impact

Exploitation of this vulnerability could lead to command injection, allowing attackers to execute arbitrary commands on the server where Inka.Net is running.

Remediation

Users are advised to upgrade to version 6.7.1 or later.