Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-2287. PoCs published by Humberto.
AI-analyzed exploit summary The provided text describes a directory traversal vulnerability in DSM Light, allowing attackers to access arbitrary files via unsanitized URI input. The example URI demonstrates traversal to the '/etc' directory.
Description
Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. (dot dot) in the wdir parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Humberto · textwebappsphp
https://www.exploit-db.com/exploits/24131
The provided text describes a directory traversal vulnerability in DSM Light, allowing attackers to access arbitrary files via unsanitized URI input. The example URI demonstrates traversal to the '/etc' directory.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
DSM Light
No auth needed
Prerequisites:
Network access to the vulnerable application
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026
Full analysis →
References (1)
Core 1
Core References
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/10381
Scores
EPSS
0.0272
EPSS Percentile
84.3%
Details
Status
published
Products (1)
dsm/light_web_file_browser
2.0
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026