CVE-2021-26626 — tobesoft XPLATFORM Arbitrary file execution Vulnerability
Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. IF the second parameter value of the execBrowser function is ‘def…
Published: 2022-04-19 · CVSS: 8.1 · CVSS 3.1
Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. IF the second parameter value of the execBrowser function is ‘default’, the first parameter value could be passed to the ShellExecuteW API. The passed parameter is an arbitrary code to be executed. Remote attackers can use this vulnerability to execute arbitrary remote code.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7