Directory traversal vulnerability in Web Forums Server 1.6 and 2.0...

5 CVSS

Vulnerability Description

Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary files via a URL containing (1) "..\" (dot dot backslash), (2) "../" (dot dot slash), (3) "/%2E%2E%5C" (encoded dot dot backslash), or (4) "%2E%2E%2F" (encoded dot dot slash).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-1496

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

http://marc.info/?l=bugtraq&m=109943267328552&w=2

More from minihttpserver.net

View All →

CVE-2004-2346

Multiple cross-site scripting (XSS) vulnerabilities in Forum Web Server 1.6...

Medium 4.3

Affected Vendor

minihttpserver.net

View all reports →

Affected Software

web forums server

Vulnerable Versions:

1.6, 2.0_power_pack

Timeline

Official Publish: February 19th, 2005

Last Modified: August 8th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.