CVE-2023-35850 (wmpro)

SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege or a privileged account can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operations or disrupt service.

account attacker cve disrupt exploit file file management function inject input management operations portal privilege privileged service system vulnerability