CVE-2025-1165 | Lumsoft ERP 8 /Api/FileUploadApi.ashx DoUpload/DoWebUpload file unrestricted upload

A vulnerability, which was classified as critical, was found in Lumsoft ERP 8. Affected is the function DoUpload/DoWebUpload of the file /Api/FileUploadApi.ashx. The manipulation of the argument file leads to unrestricted upload.

This vulnerability is traded as CVE-2025-1165. It is possible to launch the attack remotely. Furthermore, there is an exploit available.