Skip to content
OpenAdvisories
Unscored CVE-2018-5203 EUVD-2018-16988GHSA-wwgp-jqvc-gmm4

DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a vulnerability that could allow remote attacker to download and execute remote a…

Published Dec 28, 2018 · Updated Aug 5, 2024 · Assigned by krcert

Description

DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution.

Affected products

VendorProductAffectedFixed
Devpia DEXTUploadX5 DEXTUploadX5 Between 1.0.0.0 and 2.2.0.0 —

References