cbcvebase.
CVE-2011-4831
published 2011-12-15

CVE-2011-4831: Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to read arbitrary files via a ..%2f…

PriorityP426medium4CVSS 2.0
AVNACLAuSCPINAN
EXPLOIT
EPSS
2.74%
84.3th percentile
Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to read arbitrary files via a ..%2f (encoded dot dot) in the file parameter in a download action.

Affected

1 ranges
VendorProductVersion rangeFixed in
david_azoulayweb_file_browser
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.