Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ (dot dot backslash) in the second argument to the DoWebLaunch method. NOTE: some of these details are obtained from third party information.
References
Configurations
History
No history.
Information
Published : 2008-01-10 23:46
Updated : 2024-02-28 11:01
NVD link : CVE-2008-0221
Mitre link : CVE-2008-0221
CVE.ORG link : CVE-2008-0221
JSON object : View
Products Affected
gateway
- weblaunch
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')