CVE-2019-19164

Name of the Vulnerable Software and Affected Versions Dext5 Upload versions 5.0.0.112 and earlier

Description The issue allows remote files to be executed by setting the arguments to the ActiveX method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection.

Recommendations For versions 5.0.0.112 and earlier, consider disabling the ActiveX control until a patch is available to prevent remote file execution. Restrict access to the dext5.ocx ActiveX Control to minimize the risk of exploitation. Avoid using the affected ActiveX method in web pages until the issue is resolved.