CVE-2006-5963: Pentaware Pentasuite-Pro

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows user-assisted remote attackers to extract files to arbitrary pathnames via a ../ (dot dot slash) in a filename.

Affected products

• Pentaware Pentasuite-Pro: version 8.5.1.221 only
• Pentaware Pentazip: version 8.5.1.190 only

Published 2007-01-19. Last modified 2026-06-16.