PT-2026-29483

CVE-2026-5261

Published

2026-04-01

Updated

2026-04-01

Description by

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Shandong Hoteam InforCenter PLM versions up to 8.3.8

Description A flaw exists in the function uploadFileToIIS within the file /Base/BaseHandler.ashx of Shandong Hoteam InforCenter PLM. Manipulation of the File argument allows for unrestricted file uploads, potentially exploitable remotely. The exploit is publicly available.

Recommendations Update to a version beyond 8.3.8.

Exploitability

Exploit

Fix

Impacts

Researchers

0Menc

Vuldb

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control