CVE-2020-7857

概要

参考情報

• boho.or.kr/krcert/secNoticeView.do · Third Party Advisory

xplatform のその他の脆弱性

• CVE-2021-26629高 8.8A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is…
• CVE-2021-26626高 8.8Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. IF the second parameter valu…
• CVE-2020-7866緊急 9.8When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation
• CVE-2020-7853緊急 9.8An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out-of-range data to be read. An …
• CVE-2020-7841高 8.8Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the command string…