Approved changes feed: RSS · Atom

cpe:2.3:a:webwiz:web_wiz_rich_text_editor:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

VendorWebwiz (966616d3-570c-5e89-94b3-36daaa16afaa)
ProductWeb Wiz Rich Text Editor (e2fe5afc-8640-5bcd-90f6-cea5b7944e84)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-0466 vulnerable 2026-06-08 04:50:11.153765 Details available
Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files. NOTE: this can be leveraged for listings outside the configured directory tree by exploiting a separate directory traversal vulnerability.
Published: 2008-01-28T23:00:00.000Z
Updated: 2024-08-07T07:46:54.540Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.