Unrated severityNVD Advisory· Published Nov 23, 2004· Updated Jun 16, 2026
CVE-2004-0303
CVE-2004-0303
Description
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossaries/index.php, (2) the filename parameter in /readings/index.php, or (3) the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
4- www.securityfocus.com/bid/9689nvdExploitVendor Advisory
- marc.infonvd
- www.zone-h.org/en/advisories/read/id=3973/nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/15249nvd
News mentions
0No linked articles in our index yet.