CVE:CVE-2008-0473
CNNVD:CNNVD-200801-426
WEB Wiz Rich Text Editor 4.0中的RTE_popup_save_file.asp允许远程攻击者借助未明向量上传(1).HTML和(2).htm 文件。
solution:Upgrade web_wiz rich_text_editor to a higher version than 4.0,and avoid the version 4.0