CVE-2008-6938

Pi3Web ISAPI DoS (CVE-2008-6938): Pi3Web 2.0.3 before PL2 on Windows desktop installs allow remote denial of service and disclosure of server pathname by requesting a non-DLL ISAPI file (e.g., Isapi\users.txt); exploitation is demonstrated via public Metasploit module targeting /isapi/ files and ...