CVE-2006-1771 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 3.2% (pctl 88)
Patch early
A public exploit exists.
Description
Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) allows remote attackers to read arbitrary files and possibly execute arbitrary programs via a .. (dot dot) in the url parameter.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 3.16% — more likely to be exploited than 88% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-04-13 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| saxotech | saxopress |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Saxopress - 'URL' Directory Traversal | 2006-04-11 |
References
- http://secunia.com/advisories/19566
- http://www.securityfocus.com/archive/1/430707/100/0/threaded
- http://www.securityfocus.com/archive/1/431037/30/5580/threaded
- http://www.securityfocus.com/bid/17474
- http://www.vupen.com/english/advisories/2006/1327
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25768
- http://secunia.com/advisories/19566
- http://www.securityfocus.com/archive/1/430707/100/0/threaded
- http://www.securityfocus.com/archive/1/431037/30/5580/threaded
- http://www.securityfocus.com/bid/17474
- http://www.vupen.com/english/advisories/2006/1327
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25768
→ the Explorer · watch your stack · NVD