Lucene search

PRIOn knowledge basePRION:CVE-2006-1391

HistoryMar 25, 2006 - 12:06 a.m.

Code injection

2006-03-2500:06:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.2%

JSON

The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extension of a URL.

CPENameOperatorVersion
baby_asp_web_servereq2.7.2
quick_and_easy_web_servereq3.1.0
quick_and_easy_web_servereq3.0.6

Name	Operator	Version
baby_asp_web_server	eq	2.7.2
quick_and_easy_web_server	eq	3.1.0
quick_and_easy_web_server	eq	3.0.6

References

secunia.com/advisories/19306

secunia.com/advisories/19312

secunia.com/secunia_research/2006-19/advisory/

securityreason.com/securityalert/624

www.osvdb.org/24099

www.osvdb.org/24100

www.securityfocus.com/archive/1/428667/100/0/threaded

www.securityfocus.com/bid/17222

www.vupen.com/english/advisories/2006/1085

www.vupen.com/english/advisories/2006/1088

exchange.xforce.ibmcloud.com/vulnerabilities/25417

exchange.xforce.ibmcloud.com/vulnerabilities/25418