Vulnerabilities > CVE-2002-1039 - Directory Traversal vulnerability in Michael Dean Double Choco Latte 20020120/20020215

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
michael-dean

Summary

Directory traversal vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to read arbitrary files via .. (dot dot) sequences when downloading files from the Projects: Attachments feature.

Vulnerable Configurations

Part Description Count
Application
Michael_Dean
2