📦 Wmpro

WMPro software from Sunnet contains an unauthenticated arbitrary file upload vulnerability that allows remote attackers to upload malicious files (like web shells) and execute arbitrary code on affect...

WMPro software developed by Sunnet contains an arbitrary file read vulnerability due to relative path traversal. Unauthenticated remote attackers can exploit this to read sensitive system files. Organ...

This vulnerability allows authenticated attackers with administrator or privileged accounts in SUNNET WMPro portal to execute arbitrary system commands through insufficient input filtering in the file...