CVE-2020-7863

A vulnerability in File Transfer Solution of Raonwiz could allow arbitrary command execution as the result of viewing a specially-crafted web page. This vulnerability is due to insufficient validation of the parameter of the specific method. An attacker could exploit this vulnerability by setting the parameter to the command they want to execute. A successful exploit could allow the attacker to execute arbitrary commands on a target system as the user. However, the victim must run the Internet Explorer browser with administrator privileges because of the cross-domain policy.

• CWE-20
• CWE-20

• http://www.raonk.com/page/customs/modify.aspx?pSeq=20&pageno=1Vendor Advisory
• https://boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36166Third Party Advisory
• http://www.raonk.com/page/customs/modify.aspx?pSeq=20&pageno=1Vendor Advisory
• https://boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36166Third Party Advisory

Published

Aug 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7857A vulnerability of XPlatform could allow an unauthenticated …9.8
• CVE-2020-7858There is a directory traversing vulnerability in the downloa…8.6
• CVE-2020-7859Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-7860UnEGG v0.5 and eariler versions have a Integer overflow vuln…7.8
• CVE-2020-7861AnySupport (Remote support solution) before 2019.3.21.0 allo…9.8
• CVE-2020-7862A vulnerability in agent program of HelpU remote control sol…8.8
• CVE-2020-7864Parameter manipulation can bypass authentication to cause fi…9.8
• CVE-2020-7865A vulnerability(improper input validation) in the ExECM Core…9.8
• CVE-2020-7866When using XPLATFORM 9.2.2.270 or earlier versions ActiveX c…9.8
• CVE-2020-7867An improper input validation vulnerability in Helpu solution…7.8
• CVE-2020-7868A remote code execution vulnerability exists in helpUS(remot…9.8
• CVE-2020-7869An improper input validation vulnerability of ZOOK software …8.8