Dext5Upload
Approved changes feed: RSS · Atom
cpe:2.3:a:dext5:dext5upload:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dext5 (3db2838c-4c9b-5313-be6b-c2b101ba607e) |
|---|---|
| Product | Dext5Upload (6611b531-fc9f-5bbd-a92d-2bb7cc9bddf2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-7875 |
vulnerable | 2026-06-08 05:27:14.451387 |
RAONWIZ DEXT5 Upload ActiveX remote file execution vulnerability
HIGH (7.5)
DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.
Published: 2021-10-28T15:28:37.000Z
Updated: 2024-08-04T09:41:01.864Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35362 |
vulnerable | 2026-06-08 05:25:01.047790 |
Details available
DEXT5Upload 2.7.1262310 and earlier is affected by Directory Traversal in handler/dext5handler.jsp. This could allow remote files to be downloaded via a dext5CMD=downloadRequest action with traversal in the fileVirtualPath parameter (the attacker must provide the correct fileOrgName value).
Published: 2020-12-26T05:19:10.000Z
Updated: 2024-08-04T17:02:07.481Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.