CVE-2006-0815

Related Files

secunia-NetworkActiv.txt

Posted Mar 3, 2006

Authored by Tan Chew Keong | Site secunia.com

Secunia Research has discovered a vulnerability in NetworkActiv Web Server, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to a validation error of the filename extension supplied by the user in the URL. This can be exploited to retrieve the source code of script files (e.g. PHP) from the server via specially-crafted requests containing the forward slash character. Version affected: NetworkActiv Web Server 3.5.15. Other versions may also be affected.

tags | advisory, web, php

advisories | CVE-2006-0815

SHA-256 | 52e88db2fb22c4e141e5ac87318e8208574eeb0aa901289e10c84b42977dfb96

Download | Favorite | View