Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) allows remote malicious users to read arbitrary files and possibly execute arbitrary programs via a .. (dot dot) in the url parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
saxotech saxopress |