VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 29, 2008· Updated Jun 16, 2026

CVE-2008-0466

CVE-2008-0466

Description

Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files. NOTE: this can be leveraged for listings outside the configured directory tree by exploiting a separate directory traversal vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Webwiz/Forums2 versions
    cpe:2.3:a:webwiz:web_wiz_forums:9.07:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:webwiz:web_wiz_forums:9.07:*:*:*:*:*:*:*
    • (no CPE)range: 9.07
  • Webwiz/Newspad2 versions
    cpe:2.3:a:webwiz:web_wiz_newspad:1.02:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:webwiz:web_wiz_newspad:1.02:*:*:*:*:*:*:*
    • (no CPE)range: 1.02
  • Webwiz/Rich Text Editor2 versions
    cpe:2.3:a:webwiz:web_wiz_rich_text_editor:4.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:webwiz:web_wiz_rich_text_editor:4.0:*:*:*:*:*:*:*
    • (no CPE)range: 4.0

Patches

Vulnerability mechanics

References

10

News mentions

0

No linked articles in our index yet.