Vulnerability Details CVE-2020-7875
DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 6.8
References
Products affected by CVE-2020-7875
-
cpe:2.3:a:dext5:dext5upload:-
-
cpe:2.3:a:dext5:dext5upload:2.7.1262310
-
cpe:2.3:o:microsoft:windows:-