{"id":"CVE-2026-112247","kind":"vulnerability","aliases":["CVE-2026-112247"],"related":[],"title":"Wuxi Wubang safety management system: upload endpoint allows cross-site scripting","description":"A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation of the argument NewFile can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"The Five-in-One Safety Production Management Information System up to version 3.5 has a weakness in its FCKeditor upload handler at upload.aspx, where the NewFile argument is not handled safely. A remote attacker can use it to inject script that runs in the browser of a user who opens the affected page, and a public exploit exists.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["asp.net","iis","safety-management-system","vendor","wuxi-wubang"],"not_affected_if":["path-not-exposed"],"how_to_check":"- Check whether the deployment exposes `/FCKeditor/editor/filemanager/connectors/aspx/upload.aspx` (for example with `curl -I https://<host>/FCKeditor/editor/filemanager/connectors/aspx/upload.aspx`)\n- Confirm the installed product version against `3.5`; the sources say versions up to 3.5 are affected, with no exact build number given","fix":"- No fixed version is named in the sources: unknown\n- Vendor did not respond to disclosure; block or remove the FCKeditor connector path at the web server or reverse proxy until a patch is confirmed\n- Restrict access to the admin and upload pages to trusted networks","status":"open","published_at":"2026-10-19T18:17:04+00:00","first_seen_at":"2026-10-23T21:57:18+00:00","triaged_at":"2026-10-25T04:25:02+00:00","updated_at":"2026-10-25T04:25:02+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T04:25:02Z","model":"claude-haiku-5-5","output":{"fix":"- No fixed version is named in the sources: unknown\n- Vendor did not respond to disclosure; block or remove the FCKeditor connector path at the web server or reverse proxy until a patch is confirmed\n- Restrict access to the admin and upload pages to trusted networks","reach":"internet","title":"Wuxi Wubang safety management system: upload endpoint allows cross-site scripting","impact":"medium","summary":"The Five-in-One Safety Production Management Information System up to version 3.5 has a weakness in its FCKeditor upload handler at upload.aspx, where the NewFile argument is not handled safely. A remote attacker can use it to inject script that runs in the browser of a user who opens the affected page, and a public exploit exists.","category":"vendor","nicknames":[],"who_cares":["wuxi-wubang","safety-management-system","asp.net","iis"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Script runs in a victim's browser, enabling session theft or actions as that user","analyst_note":"Confirm the fixed version and whether the vendor or a third party has published a patch; check the NVD entry and any public exploit write-up for the exact auth requirement.","how_to_check":"- Check whether the deployment exposes `/FCKeditor/editor/filemanager/connectors/aspx/upload.aspx` (for example with `curl -I https://<host>/FCKeditor/editor/filemanager/connectors/aspx/upload.aspx`)\n- Confirm the installed product version against `3.5`; the sources say versions up to 3.5 are affected, with no exact build number given","needs_analyst":true,"not_affected_if":["path-not-exposed"],"who_is_affected":"Organisations running the Wuxi Wubang Five-in-One Safety Production Management Information System up to version 3.5 that expose the FCKeditor filemanager upload connector over the network. Installations where that path is not reachable from untrusted users are less exposed; the sources do not say which configurations are the default.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000703,"input_tokens":3401,"output_tokens":726,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-112247':15A,18A '-2026':14A,17A '/fckeditor/editor/filemanager/connectors/aspx/upload.aspx':118C '3.5':42B,109C 'affect':81B,111C 'allow':8A 'argument':56B,129C 'asp.net':19B 'attack':63B,143C,159C 'avail':150C 'browser':74B 'compon':121C 'contact':163C 'could':155C 'cross':10A,134C 'cross-sit':9A 'cve':13A,16A 'disclosur':167C 'earli':164C 'endpoint':7A,123C 'execut':124C 'exist':87B 'exploit':86B,146C 'fckeditor':48B 'file':117C 'five':31B,99C 'five-in-on':30B,98C 'function':114C 'handl':59B 'handler':50B 'identifi':92C 'ii':20B 'inform':37B,105C 'inject':68B 'launch':141C 'lead':132C 'made':149C 'manag':4A,23B,36B,104C 'manipul':126C 'newfil':55B,130C 'one':33B,101C 'open':79B 'page':82B 'possibl':139C 'product':35B,103C 'public':85B,153C 'remot':62B,144C 'respond':171C 'run':71B 'safe':60B 'safeti':3A,22B,34B,102C 'safety-management-system':21B 'script':12A,69B,136C 'secur':96C 'site':11A,135C 'softwar':97C 'system':5A,24B,38B,106C 'unknown':113C 'upload':6A,49B,122C 'upload.aspx':52B 'use':65B,157C 'user':77B 'vendor':25B,161C 'version':41B 'way':174C 'weak':45B,89C 'wubang':2A,28B,95C 'wuxi':1A,27B,94C 'wuxi-wubang':26B","nicknames":[],"mitigations":[],"who_affected":"Organisations running the Wuxi Wubang Five-in-One Safety Production Management Information System up to version 3.5 that expose the FCKeditor filemanager upload connector over the network. Installations where that path is not reachable from untrusted users are less exposed; the sources do not say which configurations are the default.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T18:17:04+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112247","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112247","severity":null,"published_at":"2026-10-19T18:17:04+00:00","modified_at":"2026-10-20T17:17:30+00:00","first_seen_at":"2026-10-23T21:57:18+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}