CVE-2007-0118 - Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbit

CVE-2007-0118

Summary

Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an absolute pathname in the file parameter to (1) edittag.cgi, (2) edittag.pl, (3) edittag_mp.cgi, or (4) edittag_mp.pl.

References

http://osvdb.org/33393
http://osvdb.org/33394
http://osvdb.org/33395
http://osvdb.org/33396
http://secunia.com/advisories/7950
http://www.securityfocus.com/archive/1/456055/100/0/threaded
http://www.securityfocus.com/bid/21890

Vulnerable Configurations

cpe:2.3:a:edittag:edittag:1.2:*:*:*:*:*:*:*
cpe:2.3:a:edittag:edittag:1.2:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 16-10-2018 - 16:31)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:N/A:N

refmap via4

bid	21890
bugtraq	20070105 Multiple bugs in EditTag
osvdb	33393 33394 33395 33396
secunia	7950

Last major update

16-10-2018 - 16:31

Published

09-01-2007 - 02:28

Last modified

16-10-2018 - 16:31