CVE-2013-4900: Twilightcms Twilight CMS

Medium severity, CVSS 5.0. EPSS: 3.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote attackers to read arbitrary files via a ..%5c (dot dot encoded backslash) in a GET request.

Affected products

• Twilightcms Twilight CMS: version 5.17 only

Published 2013-09-09. Last modified 2026-06-16.