Vulnerabilities

TI-2020-06346 CVE-2020-7832 · GHSA-xjhc-m7rm-mxvq

RAONWIZ DEXT5 Upload remote code execution vulnerability

MEDIUM 44

A vulnerability (improper input validation) in the DEXT5 Upload solution allows an unauthenticated attacker to download and execute an arbitrary file via AddUploadFile, SetSelectItem, DoOpenFile function.(CVE-2020-7832)

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00952 Published 2021-09-07 No fix listed CWE-20

TI-2020-10875 CVE-2020-13894 · GHSA-mwc9-x4cr-fwcw

handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to…

LOW 35

handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the savefilepath field.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01104 Published 2020-06-07 No fix listed CWE-276

TI-2020-10543 CVE-2020-13442 · GHSA-f9w8-q7vq-ch2g

A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870.

MEDIUM 47

A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02647 Published 2020-05-25 No fix listed CWE-434

Vulnerabilities

Filters

RAONWIZ DEXT5 Upload remote code execution vulnerability

handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to…

A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870.