CVE-2003-1501
Gast Arbeiter 1.3 - Unauthenticated Path Traversal and Arbitrary File Write via req_file Parameter
Title source: llmDescription
Directory traversal vulnerability in the file upload CGI of Gast Arbeiter 1.3 allows remote attackers to write arbitrary files via a .. (dot dot) in the req_file parameter.
References (3)
Core 3
Core References
Exploit mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/341870
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/13469
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/8858
Scores
EPSS
0.0250
EPSS Percentile
82.8%
Details
CWE
CWE-22
Status
published
Products (1)
gast_arbeiter/gast_arbeiter
1.3
Published
Dec 31, 2003
Tracked Since
Feb 18, 2026