CVE:CVE-2023-3504
CNNVD:CNNVD-202307-153
Smartweb Infotech SmartWeb Infotech Job Board是Smartweb Infotech公司的一个网络解决方案。
SmartWeb Infotech Job Board 1.0版本存在代码问题漏洞，该漏洞源于文件/settings/account的参数filename会导致不受限制的上传。
solution:Upgrade smartweb_infotech_job_board_project smartweb_infotech_job_board to a higher version than 1.0,and avoid the version 1.0