Zengenti ≫ Contensis

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

9.8

CVE-2022-34919

Exploit

EPSS 1.39%
Published 23.08.2022 01:15:07
Last modified 21.11.2024 07:10:26

The file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check that a user has authenticated. By uploading a crafted aspx file, it is possible to execute arbitrary commands.