CVE-2004-0302

fools_workshop owls_workshop - Directory Traversal via File Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2004-0302. PoCs published by G00db0y.

AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Owl's Workshop, allowing an attacker to read arbitrary files on the system by manipulating the 'editfile' parameter in the URI.

Description

Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter in index.php, (2) editfile in glossary.php, or (3) editfile in newmultiplechoice.php.

Exploits (3)

exploitdb WORKING POC VERIFIED
by G00db0y · textwebappsphp
https://www.exploit-db.com/exploits/23724

This exploit demonstrates a directory traversal vulnerability in Owl's Workshop, allowing an attacker to read arbitrary files on the system by manipulating the 'editfile' parameter in the URI.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Owl's Workshop (version not specified)
No auth needed
Prerequisites: Network access to the target application
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by G00db0y · textwebappsphp
https://www.exploit-db.com/exploits/23722

This exploit demonstrates a directory traversal vulnerability in Owl's Workshop, allowing an attacker to read arbitrary files on the system by manipulating the 'file' parameter in the URI. The provided example retrieves the '/etc/passwd' file, confirming the vulnerability.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Owl's Workshop (version not specified)
No auth needed
Prerequisites: Network access to the vulnerable application
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by G00db0y · textwebappsphp
https://www.exploit-db.com/exploits/23723

This exploit demonstrates a directory traversal vulnerability in Owl's Workshop, allowing an attacker to read arbitrary files on the system by manipulating the 'editfile' parameter in the URI. The provided example shows accessing '/etc/passwd' via multiple '../' sequences.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Owl's Workshop (version not specified)
No auth needed
Prerequisites: Network access to the vulnerable application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=107712123305706&w=2
Various Sources x_refsource_misc
http://www.zone-h.org/en/advisories/read/id=3973/
Exploit, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/9689
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/15249

Scores

EPSS 0.0342
EPSS Percentile 87.4%

Details

Status published
Products (1)
fools_workshop/owls_workshop 1.0
Published Nov 23, 2004
Tracked Since Feb 18, 2026