CVE-2004-0071

CVE-2004-0071 is a directory traversal vulnerability affecting PHP Man Page Lookup version 1.2.0, specifically within the buildManPage function, which allows remote attackers to read arbitrary system files via manipulated input to the command parameter. The issue carries a CVSS score of 5.0 and a high FAUCET risk score of 93, presenting a notable security risk due to its low attack complexity and the ability to be exploited over the network without authentication. While there is no evidence of active exploitation in the wild or inclusion in the CISA KEV catalog, proof-of-concept code is available on ExploitDB and the vulnerability continues to generate community discussion.