CVE-2020-7851

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Innorix Web-Based File Transfer Solution versuibs prior to and including 9.2.18.385 contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the internal method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-88

Affected software

No affected versions have been published.

Timeline

Published
Apr 19, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-78527.8DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is mishandled by DavieCVE-2020-78539.8An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out-of-range data to be read. An CVE-2020-78569.8A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficieCVE-2020-78579.8A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficCVE-2020-78588.6There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download page url is localhostCVE-2020-78607.8UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is mishaCVE-2020-78619.8AnySupport (Remote support solution) before 2019.3.21.0 allows directory traversing because of swprintf function to copy file from a managemCVE-2020-78628.8A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commandsCVE-2020-78638.8A vulnerability in File Transfer Solution of Raonwiz could allow arbitrary command execution as the result of viewing a specially-crafted weCVE-2020-78649.8Parameter manipulation can bypass authentication to cause file upload and execution. This will execute the remote code. This issue affects: CVE-2020-78659.8A vulnerability(improper input validation) in the ExECM CoreB2B solution allows an unauthenticated attacker to download and execute an arbitCVE-2020-78669.8When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation