EDB-19830
functionalMicrosoft Index Server 2.0 - '%20' ASP Source Disclosure
view exploit source exploit_dbverifiedtype remoteauthor David Litchfieldpublished 2000-03-31catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2000-0302US | medium5.0 | Exploit | ||
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan