Vulnerabilities (CVE)

Filtered by vendor Mono Subscribe
Filtered by product Monox
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-12471 1 Mono 1 Monox 2020-05-04 7.5 HIGH 9.8 CRITICAL
MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler.