EDB-20481

functional

Microsoft IIS 2.0/3.0 - Appended Dot Script Source Disclosure

view exploit source exploit_dbverifiedtype remoteauthor Mark Joseph Edwardspublished 1997-02-20catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-1999-0154USmedium5.0Exploit
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan