CVE-2004-0344

Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete arbitrary files via a .. (dot dot) in the attachOld parameter.

CVSS v2.0

6.4 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P

EPSS

2.16% chance of exploitation in the next 30 days, 81th percentile

Published

2004-03-18

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/23774

References

• CVE Record
• NVD entry

Related

• CVE-2004-0343
• CVE-2004-0345
• CVE-2004-0340
• CVE-2004-0348
• CVE-2004-0337
• CVE-2004-0349