CVE-2008-0466
Medium
Description
Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files. NOTE: this can be leveraged for listings outside the configured directory tree by exploiting a separate directory traversal vulnerability.
SeverityMedium
CVSS5.0
Exploit probability92. percentile4.9%
Product
Webwiz Web Wiz Forums
PublishedJan 29, 2008
First seenJan 29, 2008
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webwiz web_wiz_forums | 9.07 | — |
| webwiz web_wiz_newspad | 1.02 | — |
| webwiz web_wiz_rich_text_editor | 4.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.