Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files. NOTE: this can be leveraged for listings outside the configured directory tree by exploiting a separate directory traversal vulnerability.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2008-01-28T23:00:00
Updated: 2018-10-15T20:57:01
Reserved: 2008-01-28T00:00:00
Link: CVE-2008-0466
JSON object: View
NVD Information
Status : Modified
Published: 2008-01-29T00:00:00.000
Modified: 2018-10-15T22:00:44.333
Link: CVE-2008-0466
JSON object: View
Redhat Information
No data.
CWE