$ cve CVE-2007-0118 JSON

CVE-2007-0118 EXPLOIT

4.3

MEDIUM · CVSS 2.0 · EPSS 2.9% (pctl 86)

Patch early

A public exploit exists.

Description

Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an absolute pathname in the file parameter to (1) edittag.cgi, (2) edittag.pl, (3) edittag_mp.cgi, or (4) edittag_mp.pl.

Scoring

CVSS	4.3 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS	2.88% — more likely to be exploited than 86% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2007-01-09
Last modified	2026-06-16

Affected (1)

Vendor	Product
edittag	edittag

Public exploits

Source	Title	Date
exploit-db	EditTag 1.2 - 'edittag.cgi?file' Arbitrary File Disclosure	2007-01-05
exploit-db	EditTag 1.2 - 'edittag.pl?file' Arbitrary File Disclosure	2007-01-05
exploit-db	EditTag 1.2 - 'edittag_mp.cgi?file' Arbitrary File Disclosure	2007-01-05
exploit-db	EditTag 1.2 - 'edittag_mp.pl?file' Arbitrary File Disclosure	2007-01-05

References

→ the Explorer · watch your stack · NVD