Description
WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with extensions greater than 3 characters via a URL request that uses the equivalent 8.3 file name.
References
- 20020519 Multiple vendors web server source code disclosure (8.3 name format vulnerability - take II) mailing-list
- 4783 vdb-entry
- website-pro-source-disclosure(9147) vdb-entry