CVE-2004-1425

Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .

published February 12, 2005

CVSS
—
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. (dot dot) in the file parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01818 · 78.4th percentile
Published
2005-02-12T05:00Z
EPSS history
Timeline
  • 12 FEB 05:00Z
    Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .
    cvelistv5