Web Wiz » Rich Text Editor : Security Vulnerabilities, CVEs,
Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter in a save action.
Max CVSS
5.0
EPSS Score
0.51%
Published
2008-01-29
Updated
2018-10-15
RTE_popup_save_file.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload (1) .html and (2) .htm files via unspecified vectors.
Max CVSS
6.4
EPSS Score
0.43%
Published
2008-01-29
Updated
2018-10-15
2 vulnerabilities found