Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an absolute pathname in the file parameter to (1) edittag.cgi, (2) edittag.pl, (3) edittag_mp.cgi, or (4) edittag_mp.pl.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Edittag | Edittag | 1.2 (including) | 1.2 (including) |