Description
MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via a direct HTTP request to (1) /admin or (2) ServerProperties.html.
References
- 11254 vdb-entry
- mywebserver-admin-access(17520) vdb-entry
- 1011461 vdb-entry
- 20040927 MyWebServer 1.0.3 mailing-list