Unrated severityNVD Advisory· Published Sep 9, 2013· Updated Jun 16, 2026
CVE-2013-4900
CVE-2013-4900
Description
Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote attackers to read arbitrary files via a ..%5c (dot dot encoded backslash) in a GET request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:twilightcms:twilight_cms:5.17:*:*:en:*:*:*:*+ 1 more
- cpe:2.3:a:twilightcms:twilight_cms:5.17:*:*:en:*:*:*:*
- cpe:2.3:a:twilightcms:twilight_cms:5.17:*:*:ru:*:*:*:*
- Range: <=0.4.2
- Range: <=0.4.2
Patches
Vulnerability mechanics
References
4- archives.neohapsis.com/archives/bugtraq/2013-08/0126.htmlnvdExploit
- www.exploit-db.com/exploits/27777nvdExploit
- www.htbridge.com/advisory/HTB23167nvdExploit
- secunia.com/advisories/54404nvdVendor Advisory
News mentions
0No linked articles in our index yet.