Raonwiz DEXT5 File Upload Vulnerability

Raonwiz DEXT5 is a set of HTML5-based file transfer solution from Raonwiz, Korea. The product supports encrypted file transfer, form building, etc. DEXT5Upload is one of the file upload components. A security vulnerability exists in DEXT5Upload in Raonwiz DEXT5 2.7.1402870 and earlier versions,...

Remote code execution

A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870. An attacker can upload a PHP file via dext5handler.jsp handler because the uploaded file is stored under dext5uploadeddata/...

PT-2020-13543

Name of the Vulnerable Software and Affected Versions DEXT5 versions through 2.7.1402870 Description A remote code execution issue exists due to a vulnerability in DEXT5Upload. This allows an attacker to upload a PHP file via the "dext5handler.jsp" handler, as the uploaded file is stored under...