Unrated severityNVD Advisory· Published Jan 19, 2007· Updated Jun 16, 2026

CVE-2006-5963

Description

Directory traversal vulnerability in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows user-assisted remote attackers to extract files to arbitrary pathnames via a ../ (dot dot slash) in a filename.

Affected products

Pentaware/Pentasuite Pro
cpe:2.3:a:pentaware:pentasuite-pro:8.5.1.221:*:*:*:*:*:*:*
Pentaware/Pentazip
cpe:2.3:a:pentaware:pentazip:8.5.1.190:*:*:*:*:*:*:*
PentaZip/PentaZipllm-create
Range: =8.5.1.190
PentaSuite PRO/PentaSuite-PROllm-create
Range: =8.5.1.221

Patches

Vulnerability mechanics

References

secunia.com/advisories/21458nvdVendor Advisory
secunia.com/secunia_research/2006-72/advisory/nvdVendor Advisory
osvdb.org/32864nvd
www.securityfocus.com/bid/22104nvd
www.vupen.com/english/advisories/2007/0235nvd
exchange.xforce.ibmcloud.com/vulnerabilities/31581nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000