CVE-2018-5203 DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method....
CriticalCVSS 9.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dextsolution dextuploadx5 | >= 1.0.0.0, <= 2.2.0.0 | No fix listed |
| Devpia DEXTUploadX5 | = DEXTUploadX5 Between 1.0.0.0 and 2.2.0.0 | No fix listed |
References
- www.boho.or.kr third-party-advisory