cve/2008/CVE-2008-0481.md

CVE-2008-0481

Description

Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter in a save action.

POC

Reference

• http://securityreason.com/securityalert/3584
• http://www.bugreport.ir/?/31
• https://www.exploit-db.com/exploits/4971

Github

No PoCs found on GitHub currently.