CVE-2008-0479

Web Wiz NewsPad 1.02 - Path Traversal via RTE_file_browser.asp Sub Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-0479. PoCs published by BugReport.IR.

AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in Web Wiz NewsPad 1.02 due to improper sanitization of the FolderName parameter in RTE_file_browser.asp. It includes a PoC URL and a fast solution to mitigate the issue.

Description

Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by BugReport.IR · textwebappsasp

https://www.exploit-db.com/exploits/4972

View Code ZIP pw:eip

The exploit describes a directory traversal vulnerability in Web Wiz NewsPad 1.02 due to improper sanitization of the FolderName parameter in RTE_file_browser.asp. It includes a PoC URL and a fast solution to mitigate the issue.

Classification

Writeup 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: Web Wiz NewsPad 1.02

No auth needed

Prerequisites: Access to the RTE_file_browser.asp script

MITRE ATT&CK