CVE-2008-0481

Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter in a save action...

Design/Logic Flaw

RTEpopupsavefile.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload 1 .html and 2 .htm files via unspecified vectors...

CVE-2008-0473

Affected software: Web Wiz Rich Text Editor 4.0. Vulnerable component: RTE_popup_save_file.asp. Vulnerability summary: Remote attackers can upload (1) .html and (2) .htm files via unspecified vectors. Root cause (as stated): likely insufficient validation in the file-upload handling. Impact (as s...

CVE-2008-0481

Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter in a save action...

CVE-2008-0481

The CVE-2008-0481 entry concerns Web Wiz Rich Text Editor 4.0, where a directory-traversal flaw in RTE_file_browser.asp allows remote listing of arbitrary directories and .txt/.zip files via a malformed path in the sub parameter of a save action. The root cause is a traversal vulnerability in the...

wwrte-traverse.txt

WwW.BugReport.ir AmnPardaz Security Research Team Title: Web Wiz Rich Text EditorTM Vendor: http://www.webwizguide.com/ Bug: Directory traversal + HTM/HTML file creation on the server Vulnerable Version: 4.0 Exploit: Available Fix Available: No! Fast Solution is available. - Description: Web Wiz...

Web Wiz Rich Text Editor 4.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Web Wiz Rich Text Editor 4.0 Multiple Remote Vulnerabilities ============================================================ AmnPardaz Security Research Team Title: Web Wiz Rich Tex...

Web Wiz (Multiple Products) - Remote Information Disclosure

source: https://www.securityfocus.com/bid/27419/info Web Wiz Forums, NewsPad, and Rich Text Editor are prone to a remote information-disclosure vulnerability because they fail to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve arbitrary files in the context o...

Design/Logic Flaw

The Microsoft Rich Textbox ActiveX Control RICHTX32.OCX 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method...

CVE-2008-0237

The CVE-2008-0237 entry involves the Microsoft Rich Textbox ActiveX control (Richtx32.ocx, v6.1.97.82). The vulnerability lies in the SaveFile method, which can be abused to create or overwrite arbitrary files via a web page, enabling remote access to write files on the target system. Exploitatio...

msrtc-insecure.txt

----------------------------------------------------------------------------- Microsoft Rich Textbox Control 6.0 SP6 "SaveFile" Insecure Method url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose...

Microsoft Rich Textbox Control 6.0 (SP6) SaveFile() Insecure Method

No description provided by source. precodespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bMicrosoft Rich Textbox Control 6.0 SP6 "SaveFile" Insecure Method/b...

Microsoft Rich Textbox Control 6.0-SP6 - SaveFile() Insecure Method

Microsoft Rich Textbox Control 6.0-SP6 - SaveFile Insecure Method ----------------------------------------------------------------------------- Microsoft Rich Textbox Control 6.0 SP6 "SaveFile" Insecure Method url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site:...

Microsoft Rich Textbox Control 6.0 (SP6) SaveFile() Insecure Method

Exploit for unknown platform in category remote exploits =================================================================== Microsoft Rich Textbox Control 6.0 SP6 SaveFile Insecure Method ===================================================================...

Microsoft Rich Textbox Control 6.0-SP6 - 'SaveFile()' Insecure Method

----------------------------------------------------------------------------- Microsoft Rich Textbox Control 6.0 SP6 "SaveFile" Insecure Method url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose...

openSUSE 10 Security Update : opera (opera-4858)

Opera released version 9.25 of their browser to fix various security problems. CVE-2007-6520: Fixed an issue where plug-ins could be used to allow cross domain scripting, as reported by David Bloom. Details will be disclosed at a later date. CVE-2007-6521: Fixed an issue with TLS certificates tha...

GLSA-200712-22 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200712-22 Opera: Multiple vulnerabilities David Bloom reported two vulnerabilities where plug-ins CVE-2007-6520 and Rich text editing CVE-2007-6522 could be used to allow cross domain scripting. Alexander Klink Cynops GmbH...

CVE-2007-6522

The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains...

CVE-2007-6522

The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains...

CVE-2007-6522

The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains...