FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a «Content-Type: image/png» header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp.
