medium5.0Public exploit code
CVE-2004-2287
Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- dsm light Web file browser 2.0 - Directory Traversal2004-05-18 · webapps · php · Verified
Impact
Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. (dot dot) in the wdir parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dsm | Light Web File Browser | Version 2.0 |