TVN ID	TVN-202411003
CVE ID	CVE-2024-11018
CVSS	9.8 (Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products	Webopac 6, Webopac 7
Description	Webopac from Grand Vice info does not properly validate uploaded file types, allowing unauthenticated remote attackers to upload and execute webshells, which could lead to arbitrary code execution on the server.
Solution	Update Webopac 6 to version 6.5.1 or later Update Webopac 7 to version 7.2.3 or later.
Credit	TSAI, MING-HUNG, Shoui Tseng, WoodMan Kang (Onward Security Corporation)
Public Date	2024-11-08