Tobesoft MiPlatform Operating System Command Injection Vulnerability

Tobesoft MiPlatform is a user graphical interface development tool from the Korean company Tobesoft. An operating system command injection vulnerability exists in the ExtCommandApi.dll file in versions of Tobesoft MiPlatform prior to 2019.05.16 for Windows-based platforms, which can be exploited ...

Tobesoft Xplatform Injection Vulnerability

Tobesoft Xplatform is a set of Korean Tobesoft application development platform. The platform supports form and composite component inheritance, CSS autosetting, and multi-document interfaces. A security vulnerability exists in COMPONENT in TOBESOFT Xplatform 9.2.260 and earlier versions Windows...

CVE-2020-7815

XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. this can be leveraged for code execution. File download vulnerability in COMPONENT of TOBESOFT XPLATFORM allows ATTACKER/ATTACK to caus...

CVE-2020-7815

XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. this can be leveraged for code execution. File download vulnerability in COMPONENT of TOBESOFT XPLATFORM allows ATTACKER/ATTACK to caus...

Design/Logic Flaw

XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. this can be leveraged for code execution. File download vulnerability in COMPONENT of TOBESOFT XPLATFORM allows ATTACKER/ATTACK to caus...

CVE-2020-7815

TOBESOFT XPLATFORM 9.2.260 (and earlier 9.2.250 on Windows) is affected by a file-download vulnerability in COMPONENT . The issue lets an attacker supply arguments to the vulnerable method to download remote files and execute code. No explicit exploit details are provided beyond this description,...

CVE-2020-7815

XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. this can be leveraged for code execution. File download vulnerability in COMPONENT of TOBESOFT XPLATFORM allows ATTACKER/ATTACK to caus...

TOBESOFT Nexacro14/17 ExtCommonApiV13 Library Input Validation Error Vulnerability

Tobesoft Nexacro is an OSMU Single Source Multipurpose application development solution based on a unified framework. An input validation error vulnerability exists in TOBESOFT Nexacro 14/17 ExtCommonApiV13 Library versions prior to 2019.9.6, which allows a remote attacker to execute arbitrary co...

TOBESOFT Nexacro14/17 ExtCommonApiV13 Library Input Validation Error Vulnerability (CNVD-2021-18237)

Tobesoft Nexacro is an OSMU Single Source Multipurpose application development solution based on a unified framework. An input validation error vulnerability exists in TOBESOFT Nexacro 14/17 ExtCommonApiV13 Library versions prior to 2019.9.6, which allows remote attackers to exploit the...

CVE-2020-7820 Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API. This can be leveraged for code execution by rebooting the victim’s PC...

CVE-2020-7821 Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the value of registry path. This can be leveraged for code execution by rebooting the victim’s PC...

Tobesoft Xplatform Resource Management Error Vulnerability

Tobesoft Xplatform is a set of Korean Tobesoft application development platform. The platform supports form and composite component inheritance, CSS autosetting, and multi-document interfaces. A resource management error vulnerability exists in Tobesoft Xplatform versions 9.1 through 9.2.2. An...

CVE-2019-19162

A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system running it...

CVE-2019-19162

A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system running it...

Design/Logic Flaw

A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system running it...

CVE-2019-19162

CVE-2019-19162 corresponds to a use-after-free vulnerability in Tobesoft XPlatform. Affected product: Tobesoft XPlatform versions 9.1–9.2.2. Internal issue: use-after-free in resource handling leading to potential code execution on an affected system. Related sources from CNVD-2020-34996 and othe...

CVE-2019-19162

A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system running it...

Tobesoft XPlatform Code Execution Vulnerability (CNVD-2020-35375)

Tobesoft Xplatform is a set of Korean Tobesoft application development platform. The platform supports form and composite component inheritance, CSS autosetting, and multi-document interfaces. A security vulnerability exists in Tobesoft Xplatform. A remote attacker can exploit the vulnerability t...

Tobesoft Nexacro Code Execution Vulnerability

Tobesoft Nexacro is a unified framework based OSMU single-source multi-purpose application development solution from Tobesoft Korea. A security vulnerability exists in Tobesoft Nexacro 2019.9.25.1 and earlier versions. A remote attacker can exploit the vulnerability to execute code...

Tobesoft Xplatform Code Execution Vulnerability

Tobesoft Xplatform is a set of Korean Tobesoft application development platform. The platform supports form and composite component inheritance, CSS autosetting, and multi-document interfaces. A security vulnerability exists in Tobesoft Xplatform 9.2.2.250 and prior versions. A remote attacker ca...