Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET allows remote attackers to read arbitrary files via a ..
CVSS 2.0MEDIUM 5.0·Network·No auth·Interaction —·EPSS 0.06656·Published 2010-03-05·Fixed in 6.6CWE-22
Cross-site scripting (XSS) vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arbitrary web script or HTML via the _UploadID parameter.