2008-01-29 19:00:00
mitre
PUBLISHED
Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a ..... in the sub parameter.