Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-105286

Totolink A3002MU File Upload formUploadFile sub_44B250 path traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub_44B250 of the file /boafrm/formUploadFile of the component File Upload Handler. The manipulation of the argument filename results in path traversal. The attack can be executed remotely. The exploit is now public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Totolink A3002MU

  • 1.0.0-B20230403.1455affected

References