CVE-2024-13984 | Qi’anxin TianQing Management Center up to 6.7.0.4130 Multipart Form /rptsvr/upload filename file inclusion

A vulnerability has been found in Qi’anxin TianQing Management Center up to 6.7.0.4130 and classified as critical. This affects an unknown part of the file /rptsvr/upload of the component Multipart Form Handler. The manipulation of the argument filename leads to file inclusion.

This vulnerability is listed as CVE-2024-13984. The attack may be initiated remotely. There is no available exploit.