Forwarded from Taiwan Computer Network Crisis Management and Coordination Center (TWCERTCC-200-202510-00000013)

[Description]
[Excellent Infotek Corporation | Biyan Official Document Management System - Arbitrary File Upload] (CVE-2025-11948, CVSS: 9.8) The Biyan Official Document Management System developed by Excellent Infotek Corporation contains an Arbitrary File Upload vulnerability. An unauthenticated remote attacker can upload and execute a web backdoor, thereby executing arbitrary code on the server.

[Affected Platforms]
Biyan Official Document Management System

[Recommended Action]
Please contact the manufacturer for an update.

[References]
https://www.twcert.org.tw/tw/cp-132-10452-72cb6-1.html