Lucene search
HistoryApr 13, 2006 - 10:02 a.m.
CVE-2006-1771
cve-2006-1771
directory traversal
pbcs.dll
saxotech
saxopress
saxotech online
publicus
remote code execution
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.033 Low
EPSS
Percentile
91.4%
Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) allows remote attackers to read arbitrary files and possibly execute arbitrary programs via a … (dot dot) in the url parameter.
Affected configurations
Node
saxotechsaxopress
| CPE | Name | Operator | Version |
|---|---|---|---|
| saxotech:saxopress | saxotech saxopress | eq | * |
Related
cvelist
cvelist
CVE-2006-1771
2006-04-13 10:00:00
prion
prion
Directory traversal
2006-04-13 10:02:00
nessus
nessus
SAXoPRESS pbcs.dll url Parameter Traversal Arbitrary File Access
2006-04-17 00:00:00
nvd
nvd
CVE-2006-1771
2006-04-13 10:02:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.033 Low
EPSS
Percentile
91.4%
Related for CVE-2006-1771