PT-2026-45222 · Metacrm · Metacrm

·

CVE-2026-10205

·

Published

2026-06-01

·

Updated

2026-06-01

CVSS v2.0

6.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions MetaCRM version 6.4.0
Description An unrestricted upload issue exists in the file 'develop/systparam/softlogo/upload.jsp'. This flaw allows a remote attacker to upload files without proper restrictions through an unknown function within that file.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-10205

Affected Products

Metacrm