2008-01-29 19:00:00
mitre
PUBLISHED
Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a ..... in the sub parameter in a save action.