CVE

Id
30583  
CVE No.
CVE-2008-0466  
Status
Candidate  
Description
Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files. NOTE: this can be leveraged for listings outside the configured directory tree by exploiting a separate directory traversal vulnerability.  
Phase
Assigned (20080128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
325323 30583 CVE-2008-0466 BUGTRAQ:20080123 Web Wiz Forums Directory traversal  View
325324 30583 CVE-2008-0466 URL:http://www.securityfocus.com/archive/1/archive/1/486866/100/0/threaded  View
325325 30583 CVE-2008-0466 BUGTRAQ:20080123 Web Wiz Rich Text Editor Directory traversal + HTM/HTML filecreation on the server  View
325326 30583 CVE-2008-0466 URL:http://www.securityfocus.com/archive/1/archive/1/486868/100/0/threaded  View
325327 30583 CVE-2008-0466 MILW0RM:4970  View
325328 30583 CVE-2008-0466 URL:http://www.milw0rm.com/exploits/4970  View
325329 30583 CVE-2008-0466 MILW0RM:4971  View
325330 30583 CVE-2008-0466 URL:http://www.milw0rm.com/exploits/4971  View
325331 30583 CVE-2008-0466 MISC:http://www.bugreport.ir/?/29  View
325332 30583 CVE-2008-0466 MISC:http://www.bugreport.ir/?/31  View
325333 30583 CVE-2008-0466 MISC:http://www.webwizguide.com/webwizrichtexteditor/kb/release_notes.asp  View
325334 30583 CVE-2008-0466 BID:27419  View
325335 30583 CVE-2008-0466 URL:http://www.securityfocus.com/bid/27419  View
325336 30583 CVE-2008-0466 SECTRACK:1019267  View
325337 30583 CVE-2008-0466 URL:http://securitytracker.com/id?1019267  View
325338 30583 CVE-2008-0466 SREASON:3584  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47353 JVNDB-2008-002663 Comodo AntiVirus の特定の ActiveX コントロールにおける任意のコードを実行される脆弱性 Comodo AntiVirus の特定の ActiveX コントロールには、任意のコードを実行される脆弱性が存在します。 CVE-2008-0470 30583 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002663.html  View