Unrestricted File Upload Vulnerability in Generex CS141 (Versions Below 2.06)

CVE-2022-47186 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/or delete any type of file, without any format restriction and without any authentication, in the "upload" directory.

Learn more about our Web Application Penetration Testing UK.