CVE-2004-0664

PowerPortal 1.x - Path Traversal

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directories via a .. (dot dot) in the files parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by DarkBicho · textwebappsphp
https://www.exploit-db.com/exploits/24241

References (4)

Core 4
Core References
Various Sources x_refsource_misc
http://www.swp-zone.org/archivos/advisory-07.txt
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16530
Exploit, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/10622
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=108844362627811&w=2

Scores

EPSS 0.0431
EPSS Percentile 88.9%

Details

Status published
Products (3)
powerportal/powerportal 1.1b
powerportal/powerportal 1.3
powerportal/powerportal 1.3b
Published Aug 06, 2004
Tracked Since Feb 18, 2026