Description (CNA)
Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an absolute pathname in the file parameter to (1) edittag.cgi, (2) edittag.pl, (3) edittag_mp.cgi, or (4) edittag_mp.pl.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/archive/1/456055/100/0/threaded
- http://osvdb.org/33395
- http://osvdb.org/33394
- http://secunia.com/advisories/7950
- http://www.securityfocus.com/bid/21890
- http://osvdb.org/33396
- http://osvdb.org/33393
ADP enrichment
No English description supplied.