Exploit SurgeLDAP 1.0 d - Full Path Disclosure

[Exploiter]

EDB-ID

23024

Проверка EDB

1. Пройдено

Автор

ZIV KAMIR

Тип уязвимости

REMOTE

Платформа

MULTIPLE

CVE

N/A

Дата публикации

2003-08-13

source: https://www.securityfocus.com/bid/8406/info

SurgeLDAP is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing an HTTP GET request for an invalid resource.

This issue exists in the web server component of SurgeLDAP.

http://www.example.com:6680/aaa.html