轉發 台灣電腦網路危機處理暨協調中心 TWCERTCC-200-202510-00000013

[內容說明]
【傑印資訊｜筆硯公文管理系統 - Arbitrary File Upload】(CVE-2025-11948，CVSS：9.8) 傑印資訊開發之筆硯公文管理系統存在Arbitrary File Upload漏洞，未經身分鑑別之遠端攻擊者可上傳並執行網頁後門程式，進而於伺服器端執行任意程式碼。

[影響平台]
筆硯公文管理系統

[建議措施]
請聯繫廠商進行更新

[參考資料]
https://www.twcert.org.tw/tw/cp-132-10452-72cb6-1.html

Forwarded from Taiwan Computer Network Crisis Management and Coordination Center (TWCERTCC-200-202510-00000013)

[Description]
[Excellent Infotek Corporation | Biyan Official Document Management System - Arbitrary File Upload] (CVE-2025-11948, CVSS: 9.8) The Biyan Official Document Management System developed by Excellent Infotek Corporation contains an Arbitrary File Upload vulnerability. An unauthenticated remote attacker can upload and execute a web backdoor, thereby executing arbitrary code on the server.

[Affected Platforms]
Biyan Official Document Management System

[Recommended Action]
Please contact the manufacturer for an update.

[References]
https://www.twcert.org.tw/tw/cp-132-10452-72cb6-1.html