CVE-2010-2079: Magnoware Datatrack System

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

DataTrack System 3.5 allows remote attackers to bypass intended restrictions on file extensions, and read arbitrary files, via a trailing backslash in a URI, as demonstrated by (1) web.config\ and (2) .ascx\ files.

Affected products

• Magnoware Datatrack System: version 3.5 only

Published 2010-05-25. Last modified 2026-06-16.