CVE-2006-1771

SAXoPRESS (SaxoTECH SAXoPRESS, also known as SaxoTech Online/Publicus) is affected by a directory traversal in the pbcs.dll component exposed via the url parameter. The issue arises from insufficient validation of the url input, enabling an attacker to access arbitrary files on the remote host wi...