Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 11:48 a.m.11 views

CVE-2009-4535

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / slash character to the URI...

5CVSS7.1AI score0.06677EPSS
SaveExploits3References1
OpenVAS
OpenVAS
added 2010/08/02 12:0 a.m.22 views

Mongoose Web Server <= 2.8 Slash Character Remote File Disclosure Vulnerability

Mongoose Web Server is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

5CVSS6.6AI score0.06677EPSS
SaveExploits3References1
CVE
CVE
added 2009/12/31 7:0 p.m.72 views

CVE-2009-4535

The CVE affects the Mongoose Web Server (Cesanta Mongoose) ≤ 2.8.0. Affected component: the web server’s handling of URL paths; root cause is inadequate input sanitization, allowing a remote attacker to trigger a trailing slash request that discloses the server’s files (source code disclosure). I...

5CVSS6.7AI score0.06677EPSS
SaveExploits3References3Affected Software1
Rows per page
Query Builder