Raonwiz DEXT5 File Upload Vulnerability

Raonwiz DEXT5 is a set of HTML5-based file transfer solution from Raonwiz, Korea. The product supports encrypted file transfer, form building, etc. DEXT5Upload is one of the file upload components. A security vulnerability exists in DEXT5Upload in Raonwiz DEXT5 2.7.1402870 and earlier versions,...

Remote code execution

A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870. An attacker can upload a PHP file via dext5handler.jsp handler because the uploaded file is stored under dext5uploadeddata/...