Tracker / CVE-2020-7810
CVE-2020-7810
High 8.8
hslogin2.dll ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. This is due to a lack of integrity verification of the policy files referenced in the update process, and a remote attacker could induce a user to crafted web page, causing damage such as malicious code infection.
Affected products and versions
| handysoft | hslogin2.dll · … → 6.7.8.4 |
|---|---|
| handysoft | hslogin2.dll · 7.0.0 → 7.3.4 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.