CVE-2006-1771

Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online ...

7.5 HighPublic exploit

Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) allows remote attackers to read arbitrary files and possibly execute arbitrary programs via a .. (dot dot) in the url parameter.

Exploit likelihood

3.16%Down 3.6 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2006-1771
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2006-1771
Updated: 2026-11-02

EUVDEUVD-2006-1771 No score

Record: EUVD-2006-1771
Updated: 2026-11-03

GitHub AdvisoriesGHSA-9ch4-5494-6263 No score

Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online ...

Record: GHSA-9ch4-5494-6263
Updated: 2026-11-02

Affected products

saxotech saxopress

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Saxopress - 'URL' Directory Traversal	2006-04-11

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-1771 is a high vulnerability (CVSS 7.5) in Saxotech Saxopress, published April 13, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.16%, the 88th percentile. No source names a fixed version.