CVE-2004-1733

Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. (dot dot) sequences in the URL.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2004-08-20

Last modified

2024-08-08

Affected products

• Mydms (Mydms)

References

• http://marc.info/?l=bugtraq&m=109314495007280&w=2
• http://secunia.com/advisories/12340
• http://www.securityfocus.com/bid/10996
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17058