Approved changes feed: RSS · Atom

cpe:2.3:a:dext5:dext5:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDext5 (3db2838c-4c9b-5313-be6b-c2b101ba607e)
ProductDext5 (ea383889-0823-568a-9679-ad59380cb201)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7832 vulnerable 2026-06-08 05:27:14.367670 RAONWIZ DEXT5 Upload remote code execution vulnerability
HIGH (8.8)
A vulnerability (improper input validation) in the DEXT5 Upload solution allows an unauthenticated attacker to download and execute an arbitrary file via AddUploadFile, SetSelectItem, DoOpenFile function.(CVE-2020-7832)
Published: 2021-09-07T14:47:21.000Z
Updated: 2024-08-04T09:41:01.861Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13894 vulnerable 2026-06-08 05:18:01.301385 Details available
handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the savefilepath field.
Published: 2020-06-07T00:33:54.000Z
Updated: 2024-08-04T12:32:14.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13442 vulnerable 2026-06-08 05:18:00.652902 Details available
A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870. An attacker can upload a PHP file via dext5handler.jsp handler because the uploaded file is stored under dext5uploadeddata/.
Published: 2020-05-25T14:25:00.000Z
Updated: 2024-08-04T12:18:18.423Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.