Description
Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the URI.
References
- 36934 third-party-advisory
- http://packetstormsecurity.org/0910-exploits/mongoose-disclose.txt
Unscored
CVE-2009-4530
EUVD-2009-4496GHSA-v9p7-m2rm-vpw2
Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the URI.
Published Dec 31, 2009 · Updated Sep 16, 2024 · Assigned by mitre