CVE-2001-0804

Interactive Story 1.3 - Directory Traversal via Next Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2001-0804. PoCs published by qDefense.

AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in Interactive Story, a Perl-based web application, allowing attackers to read arbitrary files by manipulating the 'next' parameter with '../' sequences. No actual exploit code is provided, only a technical description of the vulnerability.

Description

Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. (dot dot) attack on the "next" parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by qDefense · textremotecgi
https://www.exploit-db.com/exploits/21008

The exploit describes a directory traversal vulnerability in Interactive Story, a Perl-based web application, allowing attackers to read arbitrary files by manipulating the 'next' parameter with '../' sequences. No actual exploit code is provided, only a technical description of the vulnerability.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Theoretical
Target: Interactive Story (version not specified)
No auth needed
Prerequisites: Access to the vulnerable web application
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/6843
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/4.3.2.7.2.20010715184257.00b20100%40compumodel.com
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/683
Patch, Vendor Advisory x_refsource_confirm
http://www.valeriemates.com/story_download.html
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/3028

Scores

EPSS 0.0367
EPSS Percentile 88.5%

Details

Status published
Products (1)
valerie_mates/interactive_story 1.3
Published Dec 06, 2001
Tracked Since Feb 18, 2026