prdelka-vs-GNU-adabas2.txt

Adabas D 13.01 (GNU/Linux & Win32) Multiple Vulns in WebApps
============================================================
Adabas D provides you with a database system that fully implements
the relational model - including support for domains, primary keys, 
updatable join views, referential integrity, triggers and database 
procedures.

A directory traversal vulnerability allows an unauthenticated user to
display arbitrary files with the privledges of the webserver.

http://www.adabashost.com/cgi-bin/genpg?../../etc/passwd

An SQL injection vulnerability exists that allows an unauthenticated
user to inject SQL statements into the remote MySQL database.

http://www.adabashost.com/cgi-bin/wque?SqlStmt=select+*+from+tables