CVE-2020-7875

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-494

Affected software

No affected versions have been published.

Timeline

Published: Oct 28, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-78778.8A buffer overflow issue was discovered in ZOOK solution(remote administration tool) through processing 'ConnectMe' command while parsing a c CVE-2020-78789.8An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and earlier versions (CVE-2020-7878). This issue is CVE-2020-78799.8This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It is necessary to extract value for ipTIME I CVE-2020-78808.8The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download CVE-2020-78818.8The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A CVE-2020-78829.1Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It CVE-2020-78839.8Printchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote fil CVE-2020-79047.4In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS.CVE-2020-79057.5Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network.CVE-2020-79067.5In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was CVE-2020-79077.5In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections.CVE-2020-79084.3In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages.