Vulnerability Details CVE-2004-0344
Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete arbitrary files via a .. (dot dot) in the attachOld parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.029
EPSS Ranking 85.6%
CVSS Severity
CVSS v2 Score 6.4
Products affected by CVE-2004-0344
-
cpe:2.3:a:yabb:yabb:1.5.5
-
cpe:2.3:a:yabb:yabb:1.5.5b