← Database

CVE-2008-2805

MEDIUM CVSS: 5.0 Published: 2008-07-07 Modified: 2026-06-16

Description

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary local files from a client computer via vectors involving originalTarget and DOM Range.

Affected Platforms

Mozilla FirefoxMozilla Seamonkey

Weakness Type

CWE-20

References