Vulnerabilities > CVE-2004-2287 - Directory Traversal vulnerability in DSM Light web File Browser 2.0

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
dsm
exploit available
NVD
Published: 2004-12-31
Updated: 2008-09-05

Summary

Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. (dot dot) in the wdir parameter.

Vulnerable Configurations

Part Description Count
Application
Dsm
1

Exploit-Db

descriptionDSM Light Web File Browser 2.0 Directory Traversal Vulnerability. CVE-2004-2287. Webapps exploit for php platform
idEDB-ID:24131
last seen2016-02-02
modified2004-05-18
published2004-05-18
reporterHumberto
sourcehttps://www.exploit-db.com/download/24131/
titledsm light Web file browser 2.0 - Directory Traversal Vulnerability

References