Handysoft: >> Groupware >> 1.7.3.1 Security Vulnerabilities
Improper input validation vulnerability in HANDY Groupware’s ActiveX moudle allows attackers to download or execute arbitrary files. This vulnerability can be exploited by using the file download or execution path as the parameter value of the vulnerable function.
CVSS Score
7.8
EPSS Score
0.004
Published
2022-05-19
ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method.
CVSS Score
6.4
EPSS Score
0.005
Published
2020-04-29