CVE-2004-1601 Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a .. (dot dot) in the op parameter.
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a .. (dot dot) in the op parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| coolphp web portal | = 1.0_stable | No fix listed |
References
- 20041016 Multiple Vulnerabilities in CoolPHP mailing-list
- 12850 third-party-advisory vendor-advisory
- 1011748 vdb-entry vendor-advisory
- 11437 vdb-entry
- coolphp-dotdot-directory-traversal(17745) vdb-entry