Description
The WeOnlyDo! SFTP (wodSFTP) ActiveX control is marked as safe for scripting, which allows remote attackers to read and write files in arbitrary locations by accessing the control from a web page.
References
- ADV-2006-2064 vdb-entry
- 18192 vdb-entry
- VU#378604 third-party-advisory
- 20361 third-party-advisory
- wodsftp-activex-unauth-access(26752) vdb-entry