Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GoAhead Webserver ASP脚本文件源代码泄露漏洞
Vulnerability Description
GoAhead WebServer是美国Embedthis公司的一款小巧的嵌入式Web服务器，它支持嵌入到各种设备和应用程序中。 GoAhead WebServer未能充分过滤HTTP请求，远程攻击者可以利用这个漏洞获得ASP脚本代码的源代码信息。 GoAhead WebServer支持ASP文件的执行，攻击者通过在ASP文件后增加部分URL编码字符，如'%00， %2f， %5c， /'，就会导致服务程序返回包含源代码数据的信息给攻击者。攻击者利用这些信息可进一步对系统进行攻击。
CVSS Information
N/A
Vulnerability Type
N/A