Unscored CVE-2003-1351 EUVD-2003-1341GHSA-v5wm-xchq-76vh

Directory traversal vulnerability in edittag.cgi in EditTag 1.1 allows remote attackers to read arbitrary files via a "%2F.." (encoded slas…

Published Oct 14, 2007 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in edittag.cgi in EditTag 1.1 allows remote attackers to read arbitrary files via a "%2F.." (encoded slash dot dot) in the file parameter.

References

edittag-dotdot-directory-traversal(11159) vdb-entry
6675 vdb-entry
20030124 Vulnerability in edittag.pl mailing-list
3231 third-party-advisory