Tobesoft Xplatform

XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. this can be leveraged for code execution. File download vulnerability in ____COMPONENT____ of TOBESOFT XPLATFORM allows ____ATTACKER/ATTACK____ to cause ____IMPACT____. This issue affects: TOBESOFT XPLATFORM 9.2.250 versions prior to 9.2.260 on Windows.

A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient validation of improper classes. This issue affects: Tobesoft XPlatform versions prior to 9.2.2.280.

Tobesoft XPLATFORM Arbitrary Command Execution Vulnerability

TOBESOFT XPLATFORM Out-of-Bounds Read/Write Vulnerabilities

Tobesoft Xplatform ActiveX File Download Vulnerability

TOBESOFT XPLATFORM arbitrary hta file execution vulnerability

tobesoft XPLATFORM Path Traversal Vulnerability

tobesoft XPLATFORM Arbitrary file execution Vulnerability

A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system running it.

A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters. An crafted malicious parameters could cause arbitrary command to execute.

Tobesoft XPlatform Arbitrary File Execution Vulnerability