CVE-2004-0303
OWLS 1.0 - Unauthenticated Arbitrary File Read via Path Traversal
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2004-0303. PoCs published by G00db0y.
AI-analyzed exploit summary The exploit describes a file disclosure vulnerability in Owl's Workshop due to improper input validation in the 'filename' parameter. An attacker can access sensitive system files like '/etc/passwd' by manipulating the URI.
Description
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossaries/index.php, (2) the filename parameter in /readings/index.php, or (3) the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd.
Exploits (3)
The exploit describes a file disclosure vulnerability in Owl's Workshop due to improper input validation in the 'filename' parameter. An attacker can access sensitive system files like '/etc/passwd' by manipulating the URI.
This is a writeup describing a local file inclusion (LFI) vulnerability in Owl's Workshop. The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'filename' parameter in the URI.
This is a writeup describing a file disclosure vulnerability in Owl's Workshop. The vulnerability allows an attacker to read arbitrary files by manipulating the 'file' parameter in the URI.