CVE-2004-0303

OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossaries/index.php, (2) the filename…

published March 18, 2004

CVSS
—
EPSS
3%
Percentile
88.1
In the wild
Unconfirmed
What it is

OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossaries/index.php, (2) the filename parameter in /readings/index.php, or (3) the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03221 · 88.1th percentile
Published
2004-03-18T05:00Z
EPSS history
Timeline
  • 18 MAR 05:00Z
    OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossaries/index.php, (2) the filename…
    cvelistv5