CVE-2025-34163

Name of the Vulnerable Software and Affected Versions: Dongsheng Logistics Software (affected versions not specified)

Description: Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that does not enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form-data POST request. This allows for remote code execution on the server, potentially leading to full system compromise.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.