Description
RTE_popup_save_file.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload (1) .html and (2) .htm files via unspecified vectors.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by BugReport.IR · textwebappsasp
https://www.exploit-db.com/exploits/4971
References (7)
Core 7
Core References
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/486868/100/0/threaded
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/4971
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/27419
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/3584
Exploit x_refsource_misc
http://www.bugreport.ir/?/31
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/27420
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1019267
Scores
EPSS
0.0944
EPSS Percentile
92.8%
Details
CWE
CWE-20
Status
published
Products (1)
web_wiz/rich_text_editor
4.0
Published
Jan 29, 2008
Tracked Since
Feb 18, 2026