OSVDB ID: 7390 Title: AppWeb Crafted URL Scripting Code Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Mbedthis's AppWeb on the Windows platform contains a flaw related to URLs that have trailing "." or " " appended. The bug affected only handlers that are matching by extension; if using URL prefix matching, the bug does not appear. This flaw may allow an attacker to cause a script to output as text on the screen, disclosing the contents of the script to an attacker. |
Classification |
Location:
Remote / Network Access
Attack Type: Information Disclosure Impact: Loss of Confidentiality Exploit: Exploit Public Disclosure: OSVDB Verified |
Solution |
Upgrade to version 1.0.4, 1.1.3, or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |