Gotac Police Statistics Database System Arbitrary File Upload Vulnerability Allowing Web Shell Execution
Vulnerability
A vulnerability allowing arbitrary file upload has been identified in the Police Statistics Database System developed by Gotac. This issue allows unauthenticated remote attackers to upload and execute web shell backdoors, enabling arbitrary code execution on the server. The vulnerability affects Police Statistics Database System versions through 1.0.2.
Impact
Exploitation of this vulnerability allows for arbitrary code execution on the server where the application is running.
Remediation
Users are advised to update to version 1.0.3 or later.
Added: Jan 16, 2026, 3:21 AM
Updated: Jan 16, 2026, 3:21 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
7.4remediation
0.0relevance
2.1threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.