CVE-2004-1801

PWebServer 0.3.3 - Directory Traversal via URL

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-1801. PoCs published by Donato Ferrante.

AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in PWebServer due to improper URI request filtering. It allows remote attackers to access arbitrary files by manipulating the URI path.

Description

Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Donato Ferrante · textremotelinux
https://www.exploit-db.com/exploits/23794

The exploit describes a directory traversal vulnerability in PWebServer due to improper URI request filtering. It allows remote attackers to access arbitrary files by manipulating the URI path.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: PWebServer (version not specified)
No auth needed
Prerequisites: Network access to the vulnerable PWebServer
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit, Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/9817
Exploit, Patch third-party-advisory x_refsource_secunia
http://secunia.com/advisories/11057
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/15404
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=107876388211413&w=2

Scores

EPSS 0.0315
EPSS Percentile 86.3%

Details

Status published
Products (3)
pwebserver/pwebserver_web_server 0.3.0
pwebserver/pwebserver_web_server 0.3.2
pwebserver/pwebserver_web_server 0.3.3
Published Dec 31, 2004
Tracked Since Feb 18, 2026