Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2020-7841

TOBESOFT XPLATFORM arbitrary hta file execution vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
krcert

Description

Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the command string is begun with http://, https://, mailto://

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TOBESOFT XPLATFORM XPlatformLib922.dll

  • 9.2.2.250 to < 9.2.2.250(2019-08-27)affected

References