CVE-2005-1090: Maxthon

Medium severity, CVSS 6.4. EPSS: 1.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the readFile and writeFile API for Maxthon 1.2.0 and 1.2.1 allows remote attackers to read or write arbitrary files.

Affected products

• Maxthon Maxthon: version 1.2.0 only; version 1.2.1 only

Published 2005-05-02. Last modified 2026-06-16.