CVE-2019-17325

ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx. That could lead to disclosure of sensitive information. User interaction is required to exploit this vulnerability in that the target must visit a...

Design/Logic Flaw

ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx. That could lead to disclosure of sensitive information. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2019-17325: Unrestricted Upload of File with Dangerous Type

ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx. That could lead to disclosure of sensitive information. User interaction is required to exploit this vulnerability in that the target must visit a...

PT-2019-15088

Name of the Vulnerable Software and Affected Versions ClipSoft REXPERT version 1.0.0.527 and earlier Description The issue allows a remote attacker to upload arbitrary local files via the ActiveX method in RexViewerCtrl30.ocx, potentially leading to the disclosure of sensitive information. This c...