NetworkActiv Web Server Crafted Filename Request Script Source Disclosure

The remote host is running NetworkActiv Web Server, a freeware web server for Windows. According to its banner, the installed version of NetworkActiv Web Server does not properly validate the extension of filenames before deciding how to serve them. By including a forward-slash character, a remot...

CVE-2006-0815

Summary of CVE-2006-0815 : Affects NetworkActiv Web Server 3.5.15. The vulnerability arises from improper validation of filename extensions when a forward slash is included in a URL, enabling a remote attacker to disclose the source code of scripts hosted on the server (information disclosure). I...

[Full-disclosure] Secunia Research: NetworkActiv Web Server Script Source Disclosure Vulnerability

====================================================================== Secunia Research 01/03/2006 - NetworkActiv Web Server Script Source Disclosure Vulnerability - ====================================================================== Table of Contents Affected...