VulnerabilityModified
CVE-2008-0480
Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter to (1) RTE_file_browser.asp or (2) file_browser.asp.
MEDIUM 5.0EPSS 3.88%
Does this matter?
Lower severity and a low EPSS score (3.88%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter to (1) RTE_file_browser.asp or (2) file_browser.asp.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 3.88% probability · 90th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- web wiz/web wiz forums
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/28601Vendor Advisory
- http://securityreason.com/securityalert/3589
- http://www.bugreport.ir/?/29Exploit
- http://www.securityfocus.com/archive/1/486866/100/0/threaded
- http://www.securityfocus.com/bid/27419
- http://www.securitytracker.com/id?1019266Exploit
- http://www.webwizguide.com/webwizforums/kb/release_notes.asp
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39856
- https://www.exploit-db.com/exploits/4970
- http://secunia.com/advisories/28601Vendor Advisory
- http://securityreason.com/securityalert/3589
- http://www.bugreport.ir/?/29Exploit
- http://www.securityfocus.com/archive/1/486866/100/0/threaded
- http://www.securityfocus.com/bid/27419
- http://www.securitytracker.com/id?1019266Exploit
- http://www.webwizguide.com/webwizforums/kb/release_notes.asp
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39856
- https://www.exploit-db.com/exploits/4970
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.