CVE-2009-4530

CVE-2009-4530 affects Mongoose Web Server (2.8.0 and earlier). Vulnerability: remote disclosure of page source by appending ::$DATA to the URI, enabling partial confidentiality impact. Core cause is a web server source code disclosure path handling flaw. No explicit exploitation details or in-the...

CVE-2009-1354

CVE-2009-1354 describes a directory traversal vulnerability in Mongoose 2.4, where remote attackers can read arbitrary files through a .. in the URI. The NVD entry records a CVSSv2 base score of 4.0 (Medium) with network attack vector and low attack complexity; impact is partial confidentiality. ...