描述
DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.
AI分析AI驱动
受影响产品
dext5dext5upload
microsoftwindows
-
参考资料
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36312Third Party Advisory
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36312Third Party Advisory