CVE-2004-2749
2wire Homeportal - Path Traversal
Title source: ruleDescription
Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to read arbitrary files via a .. (dot dot) in the return parameter. NOTE: this issue was reported as XSS, but this might be a terminology error.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Rafel Ivgi The-Insider · htmlremotewindows
https://www.exploit-db.com/exploits/23562
References (6)
Scores
EPSS
0.0053
EPSS Percentile
67.3%
Details
CWE
CWE-22
Status
published
Products (7)
2wire/homeportal
100s
2wire/homeportal
100w
2wire/homeportal
1000
2wire/homeportal
1000s
2wire/homeportal
1000sw
2wire/homeportal
1000w
2wire/homeportal
1500w
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026