| Package | Affected versions | Patched versions |
|---|---|---|
| db4web | = 3.4= 3.6 |
DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free