Description
vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a URL-encoded space character (%20).
References
- 2975 vdb-entry
- vwebserver-asp-reveal-source(6769) vdb-entry
- 20010629 4 New vulns. vWebServer and SmallHTTP mailing-list