MarkAny SafePC Enterprise Path Traversal Vulnerability Leading to SQL Injection

A path traversal vulnerability in MarkAny SafePC Enterprise allows attackers to access server information and conduct SQL injection attacks. This vulnerability may also exploit an unrestricted file upload feature that accepts dangerous file types. The issue affects SafePC Enterprise versions 7.0.* (prior to 7.0.1) and 5.*.* on both Windows and Linux.

Impact

Exploitation of this vulnerability could lead to unauthorized access to server information, SQL injection attacks, and potentially allow for the execution of malicious files on the server.