TI-2021-08336 CVE-2021-26618 · GHSA-p8wr-x64w-fh22
Tmax ToOffice arbitrary file creation vulnerability
Priority MEDIUM 44
An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice.
3 records
An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice.
JEUS 7 Fix#0~5 and JEUS 8Fix#0~1 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation file in administration web page.
NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream.