Back

CVE-2004-2287

Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. (dot dot) in the wdir parameter.

Published: Dec 31, 2004 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
dsm light_web_file_browser 2.0

GitHub Security Advisory GHSA-mpfv-6px8-3vh3

Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote...

Risk Scores

CVSS Score 5.0 / 10
EPSS Score 2.72%

Top 15% most likely to be exploited

Threat Score 20.8 / 100

Data Sources

NVD EPSS GitHub