← back
CVE-2006-1771

CVE-2006-1771

EPSS 3.1%
Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) allows remote attackers to read arbitrary files and possibly execute arbitrary programs via a .. (dot dot) in the url parameter.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/27627unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/19566https://exchange.xforce.ibmcloud.com/vulnerabilities/25768http://www.securityfocus.com/archive/1/430707/100/0/threadedhttp://www.securityfocus.com/archive/1/431037/30/5580/threadedhttp://www.securityfocus.com/bid/17474http://www.vupen.com/english/advisories/2006/1327