CVE-2004-2287: Dsm Light Web File Browser

Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. (dot dot) in the wdir parameter.

Affected products

• Dsm Light Web File Browser: version 2.0 only

Published 2004-12-31. Last modified 2026-06-16.