CVE-2002-1133: Funsoft Dinos Webserver

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

Encoded directory traversal vulnerability in Dino's web server 2.1 allows remote attackers to read arbitrary files via ".." (dot dot) sequences with URL-encoded (1) "/" (%2f") or (2) "\" (%5c) characters.

Affected products

• Funsoft Dinos Webserver: version 1.2 only

Published 2002-10-04. Last modified 2026-06-16.