CVE 5.3 MEDIUM

fcba_zzm ics-park Smart Park Management System FileUploadUtils.java unrestricted upload_CVE-2025-10398

5.3 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A security flaw has been discovered in fcba_zzm ics-park Smart Park Management System 2.0. This vulnerability affects unknown code of the file FileUploadUtils.java. The manipulation of the argument File results in unrestricted upload. The attack can be launched remotely. The exploit has been released to the public and may be exploited.

Basic Information

ID CVE-2025-10398
Source VulDB
Published Sep 14, 2025 at 12:02

Affected Product

Vendor fcba_zzm
Product ics-park Smart Park Management System
Version 2.0
Affected Versions fcba_zzm ics-park Smart Park Management System 2.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.