The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote attackers to read arbitrary files via a crafted URL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Geneweb | Geneweb | 4.05 (including) | 4.05 (including) |
| Geneweb | Geneweb | 4.06 (including) | 4.06 (including) |
| Geneweb | Geneweb | 4.07 (including) | 4.07 (including) |
| Geneweb | Geneweb | 4.08 (including) | 4.08 (including) |