Description
NetworkActiv Web Server 3.5.15 allows remote attackers to read script source code via a crafted URL with a "/" (forward slash) after the file extension.
References
- 16895 vdb-entry
- 20060301 Secunia Research: NetworkActiv Web Server Script Source DisclosureVulnerability mailing-list
- http://secunia.com/secunia_research/2006-10/advisory
- ADV-2006-0783 vdb-entry
- networkactiv-script-source-disclosure(24979) vdb-entry
- 18947 third-party-advisory
- http://www.networkactiv.com/WebServer.html