CVE-2004-0664
Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to...
CVE-2004-0664 is a medium vulnerability (CVSS 5.0) in Powerportal, published July 13, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.27%, the 94th percentile. No source names a fixed version.
Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directories via a .. (dot dot) in the files parameter.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directories via a .. (dot dot) in the files parameter.
- Record
CVE-2004-0664- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directories via a .. (dot dot) in the files parameter.
- Record
CVE-2004-0664- Updated
- 2026-11-02
EUVDEUVD-2004-0663 No score
Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directories via a .. (dot dot) in the files parameter.
- Record
EUVD-2004-0663- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h55x-gm27-83h2 No score
Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to...
Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directories via a .. (dot dot) in the files parameter.
- Record
GHSA-h55x-gm27-83h2- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PowerPortal 1.1/1.3 - 'modules.php' Traversal Arbitrary Directory Listing | 2004-06-28 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |