← CVE Intelligence

CVE-2020-7841

TOBESOFT XPLATFORM arbitrary hta file execution vulnerability PUBLISHED

Description (CNA)

Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the command string is begun with http://, https://, mailto://

Affected (CNA)

Vendor / productVersions
TOBESOFT / XPLATFORM XPlatformLib922.dllaffected 9.2.2.250 before 9.2.2.250(2019-08-27)

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.