CVE-2008-0480

CVE-2008-0480 affects Web Wiz Forums 9.07 and earlier. The vulnerability is a directory traversal in the sub parameter of two scripts (RTE_file_browser.asp and file_browser.asp), allowing remote attackers to list arbitrary directories and access .txt and .zip files. The underlying issue is improp...