Search vulnerabilities

Results 2

Export CSV
CVE-2022-47187

File upload XSS vulnerability in Generex CS141

There is a file upload XSS vulnerability in Generex CS141 below 2.06 version. The web application allows file uploading, making it possible to upload a file with HTML content. When HTML files are allowed, XSS payload can be injected into the uploaded file.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2022-47186

Unrestricted Upload of File vulnerability in Generex CS141

There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/or delete any type of file, without any format restriction and without any authentication, in the "upload" directory.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors