← Database

CVE-2022-34919

CRITICAL CVSS: 9.8 Published: 2022-08-23 Modified: 2026-06-17

Description

The file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check that a user has authenticated. By uploading a crafted aspx file, it is possible to execute arbitrary commands.

Affected Platforms

Zengenti Contensis

Weakness Type

CWE-287

References