tmaxsoft vulnerabilities

Products

• jeus 2
• ToOffice 1

Latest tmaxsoft CVEs

Newest publication first

1. CVE-2021-26618 Tmax ToOffice arbitrary file creation vulnerability

   Published 2022-02-18

   Critical·CVSS 9.8

   An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers use this vulnerability to execute arbitrary file included malicious code.

2. CVE-2019-17327 JEUS 7 Fix#05 and JEUS 8Fix#01 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation file in administration web page. That leads re...

   Published 2019-11-08

   High·CVSS 7.2

   JEUS 7 Fix#05 and JEUS 8Fix#01 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation file in administration web page. That leads remote attacker to execute arbitrary code via uploaded file.

3. CVE-2008-6528 NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream.

   Published 2009-03-26

   Medium·CVSS 5.0 Public exploit

   NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.