CVE-2007-1906: Medium severity Ecardmax.com Hot Editor vulnerability

Published Apr 10, 2007

Updated

Directory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor (Hot Editor) 4.0, and the HotEditor plugin for MyBB, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the first parameter.

Affected Software

2 affected components

Ecardmax.com Hot Editor=4.0

MyBB Mybb Hot Editor Plugin

Event History

Apr 10, 2007

CVE Published

11:19 PM

Apr 11, 2007

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1906?

CVE-2007-1906 is considered to be a high severity vulnerability due to its potential for remote code execution.

How does CVE-2007-1906 exploit directory traversal?

CVE-2007-1906 allows remote attackers to exploit directory traversal by using the .. (dot dot) sequence in the first parameter to include and execute arbitrary files.

What software is affected by CVE-2007-1906?

CVE-2007-1906 affects eCardMAX Hot Editor version 4.0 and the HotEditor plugin for MyBB.

How can I fix CVE-2007-1906?

To fix CVE-2007-1906, update to a patched version of eCardMAX Hot Editor or the MyBB Hot Editor plugin that addresses this vulnerability.

What are the potential impacts of CVE-2007-1906?

The potential impacts of CVE-2007-1906 include unauthorized access to sensitive files and execution of malicious code on the server.