CVE-2018-5203

DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution.

Score

CVSS 3.0 9.8 Critical

Status

Modified - vuln@krcert.or.kr

Published

2018-12-28

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Dextuploadx5 (Devpia)
• Dextuploadx5 (Dextsolution)

References

• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30122