vendor:
eWebeditor
by:
N/A
6,4
CVSS
MEDIUM
Directory Traversal
22
CWE
Product Name: eWebeditor
Affected Version From: all versions
Affected Version To: all versions
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
N/A
Directory Traversal in eWebeditor
eWebeditor is vulnerable to a directory traversal attack when the 'dir' parameter in the 'upload.asp' script is supplied with a malicious value. An attacker can use this vulnerability to access arbitrary files and directories stored on the server.
Mitigation:
The best way to mitigate this vulnerability is to ensure that the application is properly configured to prevent directory traversal attacks. Additionally, input validation should be implemented to ensure that user-supplied data is properly sanitized.
