CVE-2008-0479

CVE-2008-0479 is a directory traversal vulnerability affecting Web Wiz NewsPad 1.02, specifically in RTE_file_browser.asp. The issue arises from improper handling of the sub parameter (via a pattern like .....\ in the sub parameter), enabling remote attackers to list arbitrary directories and acc...