CVE-2011-5290

2015-01-0102:00:00

mitre

www.cve.org

savetofile

remote attackers

file write

unitextbox activex

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

72.0%

JSON

The SaveToFile method in the UniBasicPack.UniTextBox ActiveX control in UniBasic100_EDA1811C.ocx in IDrive Online Backup 3.4.0 allows remote attackers to write to arbitrary files via a pathname in the first argument.

References

www.htbridge.com/advisory/HTB23025