CVE-2008-0466
MEDIUM · CVSS 5.0EPSS 4.9%EU EUVD
Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files. NOTE: this can be leveraged for listings outside the configured directory tree by exploiting a separate directory traversal vulnerability.
Key facts
- CVSS score
- 5.0 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:N/AC:L/Au:N/C:P/I:N/A:N- Weakness (CWE)
- CWE-287
- EPSS score
- 4.9% (92th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2008-0476)
- Published
- January 29, 2008
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2008-0476 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- webwiz / web wiz forums
- webwiz / web wiz newspad
- webwiz / web wiz rich text editor
References
- http://securityreason.com/securityalert/3584
- http://securitytracker.com/id?1019267
- http://www.bugreport.ir/?/29
- http://www.bugreport.ir/?/31
- http://www.securityfocus.com/archive/1/486866/100/0/threaded
- http://www.securityfocus.com/archive/1/486868/100/0/threaded
- http://www.securityfocus.com/bid/27419
- http://www.webwizguide.com/webwizrichtexteditor/kb/release_notes.asp
- https://www.exploit-db.com/exploits/4970
- https://www.exploit-db.com/exploits/4971
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain