CVE-2002-1483

db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the…

published March 18, 2003

CVSS
—
EPSS
8%
Percentile
95.0
In the wild
Unconfirmed
What it is

db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form (1) C: (drive letter), (2) //absolute/path (double-slash), or (3) .. (dot-dot).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08451 · 95.0th percentile
Published
2003-03-18T05:00Z
EPSS history
Timeline
  • 18 MAR 05:00Z
    db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the…
    cvelistv5