The DB Software Laboratory DeWizardX (DEWizardAX.ocx) ActiveX control allows remote attackers to overwrite arbitrary files via the SaveToFile function.Referenceshttp://osvdb.org/36023http://moaxb.blogspot.com/2007/05/moaxb-15-db-software-laboratory.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/34304http://www.securityfocus.com/bid/23986http://shinnai.altervista.org/viewtopic.php?id=42&t_id=17