JVN#17434995: Shihonkanri Plus vulnerable to relative path traversal

Shihonkanri Plus provided by EKAKIN contains a relative path traversal vulnerability (CWE-23).

Impact

An attacker may execute arbitrary code by having a legitimate user import a specially crafted backup file of the product.

Solution

Update the software
Update the software to the latest version according to the information provided by the developer.

Products Affected

• Shihonkanri Plus Ver9.0.3 and earlier