CVE-2004-0302

CVE-2004-0302 describes a directory traversal vulnerability in OWLS 1.0, where remote attackers could read arbitrary files by manipulating the .. (dot dot) in parameters of index.php (file), glossary.php (editfile), or newmultiplechoice.php (editfile). The issue is documented across multiple sour...

CVE-2004-0302

Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the 1 file parameter in index.php, 2 editfile in glossary.php, or 3 editfile in newmultiplechoice.php...