← Vulnerability feed

Vulnerability record · CVE-2003-1463 · published 31 December 2003

CVE-2003-1463: Alt-n webadmin improper input validation vulnerability

AAlt N · Webadmin

Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation path by reading the contents of the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter.

3.5 CVSS 2.0 Low EPSS 2.0% · top 19.6% CWE-20 · Improper input validation
3.5CVSS 2.0 base score
2.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation path by reading the contents of the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter.

AV:N/AC:M/Au:S/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://securityreason.com/securityalert/3286
http://www.securityfocus.com/archive/1/319735
http://www.securityfocus.com/bid/7438
http://www.securityfocus.com/bid/7439
https://exchange.xforce.ibmcloud.com/vulnerabilities/11874
https://exchange.xforce.ibmcloud.com/vulnerabilities/11875
http://securityreason.com/securityalert/3286
http://www.securityfocus.com/archive/1/319735
http://www.securityfocus.com/bid/7438
http://www.securityfocus.com/bid/7439
https://exchange.xforce.ibmcloud.com/vulnerabilities/11874
https://exchange.xforce.ibmcloud.com/vulnerabilities/11875

Track CVE-2003-1463 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2006-4370Alt-n webadmin vulnerabilityAlt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated domain administrators to change a global …EPSS 1.8%7.5CVE-2003-0471WebAdmin WebAdmin.exe buffer overflow via long USER argumentWebAdmin.exe in Alt-N WebAdmin contains a buffer overflow reachable through an HTTP request to WebAdmin.dll with an overly long USER argument. A remo…EPSS 61%analysed4.6CVE-2006-4620Alt-n webadmin vulnerabilityThe useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain…EPSS 1.2%4.3CVE-2005-0317Alt-n webadmin vulnerabilityCross-site scripting (XSS) vulnerability in useredit_account.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to inject arbitrary web script or HT…EPSS 1.2%4.3CVE-2005-0319Alt-n webadmin vulnerabilityDirect remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come …EPSS 1.2%4.0CVE-2006-4371Alt-n webadmin vulnerabilityMultiple directory traversal vulnerabilities in Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authent…EPSS 2.7%2.1CVE-2005-0318Alt-n webadmin vulnerabilityuseredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users …EPSS 0.53%9.5CVE-2026-88771Citrix netscaler application delivery controller improper input validation vulnerabilityImproper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-…KEVEPSS 1.0%

Source: NIST National Vulnerability Database (record CVE-2003-1463), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.