CVE-2011-4831: David Azoulay Web File Browser

Medium severity, CVSS 4.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to read arbitrary files via a ..%2f (encoded dot dot) in the file parameter in a download action.

Affected products

• David Azoulay Web File Browser: version 0.4b14 only

Published 2011-12-15. Last modified 2026-06-16.