medium5.0Public exploit code
CVE-2007-6213
Multiple directory traversal vulnerabilities in mod/chat/index.php in WebED 0.0.9 allow remote attackers to read arbitrary files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WebED 0.0.9 - 'index.php' Remote File Disclosure2007-11-29 · webapps · php · Verified
Impact
Multiple directory traversal vulnerabilities in mod/chat/index.php in WebED 0.0.9 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) Root and (2) Path parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webed | Webed | Version 0.0.9 |