Files
CVEs-PoC/2013/CVE-2013-4900.md
T
2025-09-29 21:09:30 +02:00

684 B

CVE-2013-4900

Description

Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote attackers to read arbitrary files via a ..%5c (dot dot encoded backslash) in a GET request.

POC

Reference

Github

No PoCs found on GitHub currently.