Skip to content
OpenAdvisories

Vendor

Generex

7 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 5.3

    File upload XSS vulnerability in Generex CS141

    There is a file upload XSS vulnerability in Generex CS141 below 2.06 version. The web application allows file uploading, making it possible to upload a file with HTML content. When HTML files are allowed, XSS payload can be injected into the uploaded file.

  • Medium 4.3

    Privilege Escalation via file upload vulnerability at Generex CS141

    Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges.