CVE-2007-0118: Edittag

Medium severity, CVSS 4.3. EPSS: 2.9% chance of exploitation in the next 30 days.

Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an absolute pathname in the file parameter to (1) edittag.cgi, (2) edittag.pl, (3) edittag_mp.cgi, or (4) edittag_mp.pl.

Affected products

• Edittag Edittag: version 1.2 only

Published 2007-01-09. Last modified 2026-06-16.