NetSight
medium5.0

CVE-2004-0696

The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (as…

Impact

The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (asterisk) character.

Affected products

VendorProductAffected versions
4dWebstar
Versions 4.0, 5.2, 5.2.1, 5.2.2, 5.2.3, 5.2.4

References