CVE-2008-0466 - CVE House
Back to Database
Status published Medium CVE-2008-0466

Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich...

Vulnerability Description

Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files. NOTE: this can be leveraged for listings outside the configured directory tree by exploiting a separate directory traversal vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-0466

Credits & Attribution

No credits recorded in the NVD database.

References

More from webwiz

View All →
CVE-2009-5019
Web Wiz NewsPad stores sensitive information under the web root...
Medium 5
CVE-2006-6212
PHP remote file inclusion vulnerability in centre.php in Site News...
High 7.5
CVE-2006-0175
Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums...
Medium 4.3
CVE-2005-4606
SQL injection vulnerability in check_user.asp in multiple Web Wiz products...
High 7.5
CVE-2004-2733
Web Wiz Forums 7.7a uses invalid logic to determine user...
Medium 5.8

Affected Vendor

Affected Software

web wiz forums, web wiz newspad, web wiz rich text editor
Vulnerable Versions:
9.07, 1.02, 4.0

Timeline

Official Publish: January 28th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.