Siretta QUARTZ-GOLD httpd upload.cgi file write vulnerability

Talos Vulnerability Report TALOS-2022-1611 Siretta QUARTZ-GOLD httpd upload.cgi file write vulnerability January 26, 2023 CVE Number CVE-2022-39045 SUMMARY A file write vulnerability exists in the httpd upload.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HT...

PT-2022-6202

Name of the Vulnerable Software and Affected Versions InHand Networks InRouter302 version 3.5.4 Description A file write issue exists in the httpd upload.cgi functionality, allowing an attacker to upload malicious files using a specially-crafted HTTP request. This can lead to arbitrary file uploa...