CVE:CVE-2023-3836
CNNVD:CNNVD-202307-1859
Dahua Smart Parking Management是中国大华（Dahua）公司的一个停车解决方案。
Dahua Smart Parking Management 20230713之前版本存在代码问题漏洞，该漏洞源于文件/emap/devicePoint_addImgIco?hasSubsystem=true 中存在未知代码，通过参数upload导致不受限制的上传。
solution:Upgrade dahuasecurity smart_parking_management to a higher version than 20230713,and avoid the version (,20230713]