CVE-2008-0466 | BDVDB-2026-28906 Detail
Description#
Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files. NOTE: this can be leveraged for listings outside the configured directory tree by exploiting a separate directory traversal vulnerability.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/archive/1/486868/100/0/threaded
- https://www.exploit-db.com/exploits/4970
- https://www.exploit-db.com/exploits/4971
- http://www.securityfocus.com/bid/27419
- http://www.bugreport.ir/?/29
- http://securityreason.com/securityalert/3584
- http://www.bugreport.ir/?/31
- http://securitytracker.com/id?1019267
- http://www.webwizguide.com/webwizrichtexteditor/kb/release_notes.asp
- http://www.securityfocus.com/archive/1/486866/100/0/threaded
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.