CVE-2018-5197

A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters. An crafted malicious parameters could cause arbitrary command to execute.

• CWE-20

• http://support.tobesoft.co.kr/Support/index.htmlVendor Advisory
• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30097Third Party Advisory
• http://support.tobesoft.co.kr/Support/index.htmlVendor Advisory
• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30097Third Party Advisory

Published

Jan 2, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5188Memory safety bugs present in Firefox 60, Firefox ESR 60, an…
• CVE-2018-5189Race condition in Jungo Windriver 12.5.1 allows local users …
• CVE-2018-5190PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B …
• CVE-2018-5191Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-5195Hancom NEO versions 9.6.1.5183 and earlier have a buffer Ove…
• CVE-2018-5196Alzip 10.76.0.0 and earlier is vulnerable to a stack overflo…8.8
• CVE-2018-5198In Veraport G3 ALL on MacOS, a race condition when calling t…8.1
• CVE-2018-5199In Veraport G3 ALL on MacOS, due to insufficient domain vali…8.8
• CVE-2018-5200KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overf…7.8
• CVE-2018-5201Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NE…
• CVE-2018-5202SKCertService 2.5.5 and earlier contains a vulnerability tha…
• CVE-2018-5203DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a …