CVE Vulnerabilities

CVE-2004-1496

Published: Dec 31, 2004 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary files via a URL containing (1) .. (dot dot backslash), (2) ../ (dot dot slash), (3) /%2E%2E%5C (encoded dot dot backslash), or (4) %2E%2E%2F (encoded dot dot slash).

Affected Software

Name Vendor Start Version End Version
Web_forums_server Minihttpserver.net 1.6 1.6
Web_forums_server Minihttpserver.net 2.0_power_pack 2.0_power_pack

References