← Database

CVE-2004-1991

MEDIUM CVSS: 5.0 Published: 2004-05-03 Modified: 2026-06-16

Description

Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a .. (dot dot) in an HTTP GET request.

Affected Platforms

Aldostools Aldo\'S Web Server

Weakness Type

CWE-22

References