Earcms Application Distribution System Unrestricted File Upload Scanner

Earcms Application Distribution System is a platform used by developers and enterprises to manage and distribute web applications across multiple environments. It streamlines version control, updates, and deployment processes, making it essential for efficient application delivery in modern IT infrastructures.

Unrestricted File Upload vulnerability occurs when the system fails to properly validate or restrict the types of files that can be uploaded. This arises from insufficient input validation, allowing attackers to bypass security checks and upload malicious files such as web shells or executables.

Specifically, the vulnerability targets the file upload functionality in Earcms, often through parameters like 'file' or 'upload' in POST requests. The system does not enforce strict file type whitelisting or content inspection, enabling attackers to upload files with dangerous extensions like .php, .asp, or .jsp.

If exploited, an attacker can execute arbitrary code on the server, leading to full system compromise, data theft, or further lateral movement within the network. This can result in severe data breaches, service disruption, and reputational damage for the organization.