CVE-2018-5203

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-12-28 · updated 2026-06-17
Weakness: CWE-20

Description

DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution.

Affected products

Devpia DEXTUploadX5: from 1.0.0.0 through 2.2.0.0

References

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30122
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30122

Get alerted when CVE-2018-5203 or the next vulnerability affects your stack