Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form (1) C: (drive letter), (2) //absolute/path (double-slash), or (3) .. (dot-dot).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DB4Web远程文件泄露漏洞
Vulnerability Description
DB4Web是一款应用服务程序，允许通过WEB对关系数据库和其他信息资源进行读写访问，此应用程序可使用在Windows、Linux和各类Unix操作系统下。 DB4Web存在目录遍历问题，远程攻击者可以利用这个漏洞以WEB权限查看系统任意文件内容。 DB4Web中的db4web_c(Unix/Linux系统)和db4web_c.exe(MS Windows系统)二进制程序对用户提交的畸形输入请求缺少检查，攻击者可能以WEB权限查看系统中任意文件内容，造成敏感信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A