CVE-2004-0696: 4d Webstar

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (asterisk) character.

Affected products

• 4d Webstar: version 4.0 only; version 5.2 only; version 5.2.1 only; version 5.2.2 only; version 5.2.3 only; version 5.2.4 only; …

Published 2004-07-27. Last modified 2026-06-16.