CVE-2004-0303

OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossaries/index.php, (2) the filename parameter in /readings/index.php, or (3) the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:fools_workshop:owls_workshop:1.0:*:*:*:*:*:*:*

Information

Published : 2004-11-22 21:00

Updated : 2017-07-10 18:30


NVD link : CVE-2004-0303

Mitre link : CVE-2004-0303


JSON object : View

Advertisement

dedicated server usa

Products Affected

fools_workshop

  • owls_workshop