Vulnerability · Published Aug 27, 2025 · Assigned by VulnCheck

CVE-2024-13984Qi'anxin TianQing Management Center rptsvr Arbitrary File Upload

Critical 10.0

In plain English

A critical-severity path traversal in TianQing Management Center from Qi'anxin. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 4.0)10.0Critical

Exploit odds (30 days)0.8%top 42.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

QiAnXin TianQing Management Center versions up to and including 6.7.0.4130 contain a path traversal vulnerability in the rptsvr component that allows unauthenticated attackers to upload files to arbitrary locations on the server. The /rptsvr/upload endpoint fails to sanitize the filename parameter in multipart form-data requests, enabling path traversal. This allows attackers to place executable files in web-accessible directories, potentially leading to remote code execution. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-08-23 UTC.

Affected products (as reported)

Vendor	Product	Versions
Qi'anxin	TianQing Management Center	0 – through 6.7.0.4130

Weakness: CWE-73, CWE-22 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References

https://cn-sec.com/archives/2421288.html technical-description, exploit
https://blog.csdn.net/maxiluo/article/details/135865584 technical-description, exploit
https://www.qianxin.com/product/detail/pid/330 product
https://www.vulncheck.com/advisories/qianxin-tianqing-management-center-arbitrary-file-upload third-party-advisory