CVE-2020-7849

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability of uPrism.io CURIX(Video conferecing solution) could allow an unauthenticated attacker to execute arbitrary code. This vulnerability is due to insufficient input(server domain) validation. An attacker could exploit this vulnerability through crafted URL.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Feb 17, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-78507.8NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setti CVE-2020-78517.8Innorix Web-Based File Transfer Solution versuibs prior to and including 9.2.18.385 contains a vulnerability that could allow remote files t CVE-2020-78527.8DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is mishandled by Davie CVE-2020-78539.8An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out-of-range data to be read. An CVE-2020-78569.8A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficie CVE-2020-78579.8A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insuffic CVE-2020-78588.6There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download page url is localhost CVE-2020-78607.8UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is misha CVE-2020-78619.8AnySupport (Remote support solution) before 2019.3.21.0 allows directory traversing because of swprintf function to copy file from a managem CVE-2020-78628.8A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands CVE-2020-78638.8A vulnerability in File Transfer Solution of Raonwiz could allow arbitrary command execution as the result of viewing a specially-crafted we CVE-2020-78649.8Parameter manipulation can bypass authentication to cause file upload and execution. This will execute the remote code. This issue affects: