U.S. Dept Of Defense: Elmah.axd is publicly accessible leaking Error Log

Summary ELMAH Error Logging Modules and Handlers is an application-wide error logging facility that is completely pluggable. If ELMAH is not properly configured, the elmah.axd handler can be accessed without authorization. This page will list all the error messages generated by the web applicatio...

ELMAH Information Disclosure

ELMAH Error Logging Modules and Handlers is an application error logging facility. This application is not properly configured and leads to information disclosure via elmah.axd or errorlog.axd. This allows an unauthenticated, remote attacker to view web requests made to the server, including...

ELMAH (Error Logging Modules and Handlers) Remotely Accessible

The remote web server hosts ELMAH, an error logging application used with ASP.NET web applications. The elmah.axd script was accessed remotely without authentication, which could provide detailed information that could provide a remote, unauthenticated attacker with sensitive data that could be...