Path Traversal in Perfection Bytes Pbemail
CVE-2007-5446
Absolute path traversal vulnerability in a certain ActiveX control in PBEmail7Ax.dll in PBEmail 7 ActiveX Edition allows remote attackers to create or overwrite arbitrary files via a full pathname in the XmlFilePath argument to the SaveSenderToXml method.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.058 (92.3th percentile) — read the EPSS interpretation.
Affected products
- Perfection_bytes Pbemail — versions 7.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)