EDB-21853

functional

Apache Tomcat 3/4 - 'DefaultServlet' File Disclosure

view exploit source exploit_dbverifiedtype remoteauthor Rossen Raykovpublished 2002-09-24catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2002-1148US	medium5.0	18.6% (97th)	Exploit	2002-10-11
The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct r…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.