CVE-2019-19164

CVE-2019-19164 concerns the dext5.ocx ActiveX Control used by Dext5 Upload (versions up to 5.0.0.112). The weakness arises from how the ActiveX method arguments are processed, enabling remote code execution when a user visits a crafted page. Documents in multiple sources confirm an ARBITRARY FILE...

CVE-2019-19169

CVE-2019-19169 affects Raonwiz Dext5.ocx ActiveX control (version 5.0.0.116 and earlier). The vulnerability allows a remote attacker to download arbitrary files by supplying specific arguments to the ActiveX method, which can be leveraged for code execution. Connected sources corroborate the same...

CVE-2019-19168

CVE-2019-19168 affects Dext5.ocx ActiveX (version 5.0.0.116 and earlier). The vulnerability allows a remote attacker to download and execute an arbitrary file by setting arguments to the ActiveX method, enabling code execution. Connected sources (Red Hat, CNVD/CVE records, CVE details) corroborat...