Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote attackers to read arbitrary files via a …%5c (dot dot encoded backslash) in a GET request.
CPE | Name | Operator | Version |
---|---|---|---|
twilight_cms | eq | 5.17 | |
twilight_cms | eq | 5.17 |