CVE-2020-12471

MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler...

CVE-2020-12471: Deserialization of Untrusted Data

MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler...

PT-2020-13131

Name of the Vulnerable Software and Affected Versions MonoX versions prior to 5.1.40.5152 Description The issue allows remote code execution due to deserialization in certain modules. This can be exploited via specific API endpoints, such as "HTML5Upload.ashx" or...