Vulnerabilities

TI-2009-04775 CVE-2009-5019 · GHSA-6m9v-v9ff-7pjf

Web Wiz NewsPad stores sensitive information under the web root with insufficient access…

LOW 28

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02741 Published 2010-12-01 No fix listed CWE-264

TI-2008-00441 CVE-2008-0466 · GHSA-qxjq-q2r2-ccg4

Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums…

LOW 31

Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04927 Published 2008-01-28 No fix listed CWE-287

Vulnerabilities

Filters

Web Wiz NewsPad stores sensitive information under the web root with insufficient access…

Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums…