CVE-2004-0303

CVE-2004-0303 describes a critical arbitrary file access vulnerability in OWLS 1.0, affecting both Fool's Workshop and Owl's Workshop products. This flaw allows unauthenticated remote attackers to retrieve sensitive files, such as /etc/passwd, by manipulating file or filename parameters in specific PHP scripts. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N), it indicates a network-exploitable vulnerability with low attack complexity, requiring no authentication, and leading to partial confidentiality impact. While not on the KEV catalog, exploit code is publicly available on ExploitDB, and the vulnerability has garnered significant community discussion, suggesting its potential for exploitation.