Unscored severity · published Aug 20, 2004
CVE-2004-1733
Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via
–
CVSS
1.7%
EPSS
No
On KEV
Description
Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. (dot dot) sequences in the URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MY
Mydms · Mydms
1.4; 1.4.1; 1.4.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1733
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1733
marc.info
http://marc.info/?l=bugtraq&m=109314495007280&w=2
Patch
http://secunia.com/advisories/12340
Exploit
http://www.securityfocus.com/bid/10996
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17058
More from Mydms
–
CVE-2004-1732
SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter