Critical severity9.8NVD Advisory· Published May 25, 2020· Updated Jun 17, 2026
CVE-2020-13442
CVE-2020-13442
Description
A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870. An attacker can upload a PHP file via dext5handler.jsp handler because the uploaded file is stored under dext5uploadeddata/.
Affected products
3- Range: <=2.7.1402870
- DEXT5/DEXT5Uploaddescription
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.