Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The SaveDoc method in the All_In_The_Box.AllBox ActiveX control in ALL_IN_THE_BOX.OCX in Synactis ALL In-The-Box ActiveX 3 allows remote attackers to create and overwrite arbitrary files via an argument ending in a '\0' character, which bypasses the intended .box filename extension, as demonstrated by a C:\boot.ini\0 argument.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Synactis ALL In-The-Box ActiveX 'All_In_The_Box.AllBox ActiveX'控件任意文件重写漏洞
Vulnerability Description
Synactis ALL In-The-Box是一款功能强大的开发工具。 Synactis ALL In-The-Box ActiveX 3版本的ALL_IN_THE_BOX.OCX里的All_In_The_Box.AllBox ActiveX控件中的SaveDoc方式允许远程攻击者借助一个以"'\0'"字符结尾的自变量，创建和重写任意文件。该自变量会绕过设置的.box文件扩展名，比如C:\boot.ini\0自变量。
CVSS Information
N/A
Vulnerability Type
N/A