Priority HIGH 68
Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the Wr…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.40655 · Published 2008-11-10 · No fix listed CWE-20
Priority LOW 38
Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04721 · Published 2008-10-15 · No fix listed
Priority MEDIUM 42
Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0594 · Published 2008-10-15 · No fix listed
Priority MEDIUM 51
The Chilkat XML ChilkatUtil.CkData.1 ActiveX control (ChilkatUtil.dll) 3.0.3.0 and earlier allows remote attackers to create, overwrite, and modify arbitrary files for execution via a call to the (1) SaveToFile, (2) Save…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08681 · Published 2008-09-30 · No fix listed CWE-20
Priority LOW 36
Directory traversal vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to include and execute arbitrary local files via a ..
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01532 · Published 2008-04-30 · No fix listed CWE-22
Priority LOW 36
PHP remote file inclusion vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter to the default URI under install/.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01532 · Published 2008-04-30 · No fix listed CWE-94
Priority MEDIUM 50
The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0, and earlier in ChilkatHttp ActiveX expose the unsafe SaveLastError method, which allows remote atta…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07011 · Published 2008-04-02 · No fix listed CWE-20
Priority LOW 24
Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or overwrite arbitrary files via a full pathname in the first arg…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01759 · Published 2007-08-08 · No fix listed
Priority LOW 34
Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.02877 · Published 2007-07-10 · No fix listed