CVE-2006-1391
CVE-2006-1391
The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extension of a URL.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://secunia.com/advisories/19306http://secunia.com/advisories/19312http://secunia.com/secunia_research/2006-19/advisory/http://securityreason.com/securityalert/624https://exchange.xforce.ibmcloud.com/vulnerabilities/25417https://exchange.xforce.ibmcloud.com/vulnerabilities/25418http://www.osvdb.org/24099http://www.osvdb.org/24100http://www.securityfocus.com/archive/1/428667/100/0/threadedhttp://www.securityfocus.com/bid/17222http://www.vupen.com/english/advisories/2006/1085http://www.vupen.com/english/advisories/2006/1088