DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.
CPE | Name | Operator | Version |
---|---|---|---|
dext5upload | le | 5.0.0.117 |