VDB

GCVE-110-CERTCC-2006-378604

GCVE-110-CERTCC-2006-378604
Advisory Published
Vulnetix · Advisory published May 30, 2006
The WeOnlyDo! SFTP ActiveX control is incorrectly marked safe for scripting. This may allow a remote unauthenticated attacker to upload arbitrary files from a vulnerable system to an SFTP server or download arbitrary files from an SFTP server to a vulnerable system.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact17population4exploitation0widely_known1score_current5.049ease_of_exploitation20
certcc-vrda
certcc-vrda
d1_impact3d1_population2d1_direct_report1

Aliases

CVE-2006-1175

Transitive aliases

GSD-2006-1175GHSA-rgff-6m6r-89pv

References

WeOnlyDo! SFTP ActiveX control fails to properly restrict access to methods
url
WeOnlyDo! SFTP ActiveX control fails to properly restrict access to methods
advisory
WeOnlyDo! SFTP ActiveX control fails to properly restrict access to methods
advisory
WeOnlyDo! SFTP ActiveX control fails to properly restrict access to methods
advisory
WeOnlyDo! SFTP ActiveX control fails to properly restrict access to methods
advisory
WeOnlyDo! SFTP ActiveX control fails to properly restrict access to methods
advisory

Browse GCVE Records

73,442 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›