CVE-2020-13894
handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the savefilepath field.
Published: 2020-06-07 · CVSS: Unscored
handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the savefilepath field.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7