5.0med
CVE-2004-22871 exploit
Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via ..…
Published 21 y ago · modified 4 mo ago · JSON
CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.7%
percentile 86%
Public exploits
1
Exploit-DB
Summary
Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. (dot dot) in the wdir parameter.
Exploit prediction (EPSS)
2.72% probability of exploitation in the next 30 days, higher than 86% of all scored CVEs.
Exploits and detections
- EDB-24131 dsm light Web file browser 2.0 - Directory Traversal · webapps · 2004-05-18
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
References
- securityfocus.com /bid/10381 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2004-2287
- NVD: CVE-2004-2287
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.