EDB-19194

functional

Microsoft IIS 3.0/4.0 - Using ASP and FSO To Read Server Files

view exploit source exploit_dbverifiedtype remoteauthor Gary Geisbertpublished 1999-02-11catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-1999-1375US	medium5.0	30.5% (98th)	Exploit	1999-02-11
FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.