CVE-2020-7832

概要

参考情報

• boho.or.kr/krcert/secNoticeView.do · Third Party Advisory

dext5 のその他の脆弱性

• CVE-2020-13894高 7.5handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the savefilepath field.
• CVE-2020-13442緊急 9.8A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870. An attacker can upload a PHP file via dext5handler…