CVE-2025-41347
EUVD-2025-19797918.11.2025, 11:15
Unlimited upload vulnerability for dangerous file types in WinPlus v24.11.27 from Informática del Este. This vulnerability allows an attacker to upload a 'webshell' by sending a POST request to '/WinplusPortal/ws/sWinplus.svc/json/uploadfile'.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| iest | winplus | 24.11.27 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration