5
CVSSv2

CVE-2004-2287

Published: 31/12/2004 Updated: 05/09/2008
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote malicious users to read arbitrary files via .. (dot dot) in the wdir parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

dsm light web file browser 2.0

Exploits

source: wwwsecurityfocuscom/bid/10381/info DSM Light has been reported to be prone to a directory traversal vulnerability This issue is due to a failure of the application to properly sanitize user-supplied URI input This issue would allow an attacker to view arbitrary, web-readable files on the affected computer This may aid an attac ...