Lucene search
PRIOn knowledge basePRION:CVE-2021-26626HistoryApr 19, 2022 - 9:15 p.m.
Input validation
2022-04-1921:15:00
PRIOn knowledge base
www.prio-n.com
5
Improper input validation vulnerability in XPLATFORM’s execBrowser method can cause execute arbitrary commands. IF the second parameter value of the execBrowser function is ‘default’, the first parameter value could be passed to the ShellExecuteW API. The passed parameter is an arbitrary code to be executed. Remote attackers can use this vulnerability to execute arbitrary remote code.
Related
nvd
nvd
CVE-2021-26626
2022-04-19 21:15:12
cve
cve
CVE-2021-26626
2022-04-19 21:15:12
cvelist
cvelist
CVE-2021-26626 tobesoft XPLATFORM Arbitrary file execution Vulnerability
2022-04-19 20:26:30