medium4.3Public exploit code
CVE-2007-0118
Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an absolute pathname in the file parameter t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- EditTag 1.2 - 'edittag_mp.pl?file' Arbitrary File Disclosure2007-01-05 · webapps · cgi · Verified
- EditTag 1.2 - 'edittag_mp.cgi?file' Arbitrary File Disclosure2007-01-05 · webapps · cgi · Verified
- EditTag 1.2 - 'edittag.pl?file' Arbitrary File Disclosure2007-01-05 · webapps · cgi · Verified
- EditTag 1.2 - 'edittag.cgi?file' Arbitrary File Disclosure2007-01-05 · webapps · cgi · Verified
Impact
Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an absolute pathname in the file parameter to (1) edittag.cgi, (2) edittag.pl, (3) edittag_mp.cgi, or (4) edittag_mp.pl.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Edittag | Edittag | Version 1.2 |
References
- NVD record
- CVE.org record
- http://osvdb.org/33393
- http://osvdb.org/33394
- http://osvdb.org/33395
- http://osvdb.org/33396
- http://secunia.com/advisories/7950
- http://www.securityfocus.com/archive/1/456055/100/0/threaded
- http://www.securityfocus.com/bid/21890
- http://osvdb.org/33393
- http://osvdb.org/33394
- http://osvdb.org/33395
- http://osvdb.org/33396
- http://secunia.com/advisories/7950
- http://www.securityfocus.com/archive/1/456055/100/0/threaded
- http://www.securityfocus.com/bid/21890