TI-2021-08336 CVE-2021-26618 · GHSA-p8wr-x64w-fh22
Tmax ToOffice arbitrary file creation vulnerability
Priority MEDIUM 44
An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice.
No TmaxSoft vulnerabilities are listed in CISA KEV.
3 records
An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice.
JEUS 7 Fix#0~5 and JEUS 8Fix#0~1 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation file in administration web page.
NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream.