CVE-2008-0221

Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ (dot dot backslash) in the second argument to the DoWebLaunch method. NOTE: some of these details are obtained from third party information.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

5.73% chance of exploitation in the next 30 days, 93th percentile

Published

2008-01-10

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/4869

References

• CVE Record
• NVD entry

Related

• CVE-2008-0220
• CVE-2008-0222
• CVE-2008-0219
• CVE-2008-0224
• CVE-2008-0218
• CVE-2008-0225