CVE-2004-1426

CVE-2004-1426 describes a directory traversal vulnerability in KorWeblog 1.6.2-cvs and earlier versions. This flaw allows remote attackers to read arbitrary files and execute PHP files by manipulating the 'lng' parameter with dot-dot sequences. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and no authentication required, potentially leading to information disclosure. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the CVE has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.