ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method.
7.2CVSS
7.3AI Score
0.002EPSS
Improper input validation vulnerability in HANDY Groupwareโs ActiveX moudle allows attackers to download or execute arbitrary files. This vulnerability can be exploited by using the file download or execution path as the parameter value of the vulnerable function.
9.8CVSS
9.5AI Score
0.003EPSS