CVE-2009-4665

Description

Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/50727

http://www.exploit-db.com/exploits/8785

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS