CVE-2024-9985— Ragic Enterprise Cloud Database - Arbitrary File Upload
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-9985
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ragic Enterprise Cloud Database - Arbitrary File Upload
Source: NVD (National Vulnerability Database)
Vulnerability Description
Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it to execute arbitrary code on the remote server.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
危险类型文件的不加限制上传
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ragic Enterprise Cloud Database 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ragic Enterprise Cloud Database是Ragic公司的一个企业云数据库。 Ragic Enterprise Cloud Database 2024/08/08 09:45:25之前版本存在安全漏洞，该漏洞源于未正确验证上传的文件类型，使得具有常规权限的攻击者可以上传webshell并使用它在远程服务器上执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Ragic | Enterprise Cloud Database | 0 ~ 2024/08/08 09:45:25 | - |
II. Public POCs for CVE-2024-9985
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-9985
请登录查看更多情报信息。
Same Patch Batch · Ragic · 2024-10-15 · 3 CVEs total
| CVE-2024-9984 | 9.8 CRITICAL | Ragic Enterprise Cloud Database - Missing Authentication |
| CVE-2024-9983 | 7.5 HIGH | Ragic Enterprise Cloud Database - Arbitrary File Read through Path Traversal |
IV. Related Vulnerabilities
Same product: Enterprise Cloud Database
- CVE-2025-15016
Ragic｜Enterprise Cloud Database - Hard-coded Cryptographic K - CVE-2025-15015
Ragic｜Enterprise Cloud Database - Arbitrary File Read - CVE-2025-11675
Ragic｜Enterprise Cloud Database - Arbitrary File Upload - CVE-2024-9984
Ragic Enterprise Cloud Database - Missing Authentication - CVE-2024-9983
Ragic Enterprise Cloud Database - Arbitrary File Read throug
Same vendor: Ragic
- CVE-2025-15016
Ragic｜Enterprise Cloud Database - Hard-coded Cryptographic K - CVE-2025-15015
Ragic｜Enterprise Cloud Database - Arbitrary File Read - CVE-2025-11675
Ragic｜Enterprise Cloud Database - Arbitrary File Upload - CVE-2024-9984
Ragic Enterprise Cloud Database - Missing Authentication - CVE-2024-9983
Ragic Enterprise Cloud Database - Arbitrary File Read throug
Same weakness: CWE-434
- CVE-2021-47943
TextPattern CMS 4.8.7 Remote Code Execution via File Upload - CVE-2021-47937
e107 CMS 2.3.0 Authenticated Remote Code Execution via Theme - CVE-2026-41517
Emlog: Remote Code Execution via Malicious Plugin Upload - CVE-2026-6692
Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber - CVE-2026-41587
CI4MS: Unrestricted PHP File Upload via Theme Installation L
V. Comments for CVE-2024-9985
No comments yet