CVE-2004-1601

CVE-2004-1601 describes a directory traversal vulnerability in CoolPHP 1.0-stable, specifically within the index.php file. This flaw allows unauthenticated remote attackers to access arbitrary files and execute local PHP scripts by manipulating the 'op' parameter with dot-dot-slash sequences. With a CVSS score of 7.5, this vulnerability presents a high risk due to its network-based attack vector, low attack complexity, and potential for full compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog and lacking Metasploit or Nuclei modules, an ExploitDB entry exists, indicating public exploit code, though there is no evidence of active exploitation or significant community discussion.