Kofax e-Transactions Sender Sendbox File Injection Vulnerability

Kofax e-Transactions Sender Sendbox is an add-on application to a suite of Kofax conversion modules from Kofax USA that automates the electronic transfer of documents to business processes via secure e-mail. A file injection vulnerability exists in Kofax e-Transactions Sender Sendbox, which allow...

Code injection

The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument...

CVE-2011-5294

The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument...

Kofax 2.5.0.933 File Overwrite

Vulnerability ID: HTB23016 Reference: http://www.htbridge.ch/advisory/kofaxetransactionssendersendboxactivexcontrolsavemessageinsecuremethod.html Product: Kofax e-Transactions Sender Sendbox Vendor: Kofax, Inc http://www.kofax.com/ Vulnerable Version: 2.5.0.933 and probably prior Tested on:...