CVE-2007-0118

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-01-09 · updated 2026-06-16

Description

Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an absolute pathname in the file parameter to (1) edittag.cgi, (2) edittag.pl, (3) edittag_mp.cgi, or (4) edittag_mp.pl.

Affected products

Edittag: 1.2

References

http://osvdb.org/33393
http://osvdb.org/33394
http://osvdb.org/33395
http://osvdb.org/33396
http://secunia.com/advisories/7950
http://www.securityfocus.com/archive/1/456055/100/0/threaded
http://www.securityfocus.com/bid/21890
http://osvdb.org/33393
http://osvdb.org/33394
http://osvdb.org/33395
http://osvdb.org/33396
http://secunia.com/advisories/7950

Get alerted when CVE-2007-0118 or the next vulnerability affects your stack