• info
• discussion
• exploit
• solution
• references

DWebPro Directory Traversal Vulnerability and Arbitrary File Disclosure Vulnerability

DWebPro is prone to a directory-traversal vulnerability and a vulnerability that allows attackers to view arbitrary files.

An attacker can exploit these issues to obtain sensitive information that may lead to other attacks.

DWebPro 6.8.26 is vulnerable; other versions may also be affected.