Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-1771. PoCs published by SecuriTeam.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in SAXoPRESS, allowing an attacker to retrieve arbitrary files from the system by manipulating the 'url' parameter in the 'pbcs.dll' endpoint.
Description
Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) allows remote attackers to read arbitrary files and possibly execute arbitrary programs via a .. (dot dot) in the url parameter.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in SAXoPRESS, allowing an attacker to retrieve arbitrary files from the system by manipulating the 'url' parameter in the 'pbcs.dll' endpoint.