Unscored CVE-2004-1733 EUVD-2004-1727GHSA-q3ph-w9hq-wf9p

Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. (dot dot)…

Published Feb 26, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. (dot dot) sequences in the URL.

References

10996 vdb-entry
12340 third-party-advisory
20040820 Multiple vulnerabilities in MyDMS mailing-list
mydms-dotdot-file-download(17058) vdb-entry