NetSight
IP …
medium5.0

CVE-2008-2805

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary local files from a client computer via vect…

Impact

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary local files from a client computer via vectors involving originalTarget and DOM Range.

Affected products

VendorProductAffected versions
MozillaFirefox
through 2.0.0.14
Versions 2.0, 2.0.0.1, 2.0.0.2, 2.0.0.3, 2.0.0.4
MozillaSeamonkey
through 1.1.9
Versions 1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5

Weakness classification

CWE-20

References