SAXoPRESS pbcs.dll url Parameter Traversal Arbitrary File Access

The remote host is running SAXoPRESS or Publicus, web content management systems commonly used by newspapers. The installation of SAXoPRESS / Publicus on the remote host fails to validate user input to the 'url' parameter of the 'apps/pbcs.dll' script. An attacker can exploit this issue to access...

CVE-2006-1771

SAXoPRESS (SaxoTECH SAXoPRESS, also known as SaxoTech Online/Publicus) is affected by a directory traversal in the pbcs.dll component exposed via the url parameter. The issue arises from insufficient validation of the url input, enabling an attacker to access arbitrary files on the remote host wi...