Description
The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (asterisk) character.
References
- A071304-1 vendor-advisory
- 4dwebstar-view-directory-listing(16687) vdb-entry
- 10721 vdb-entry