medium5.0Public exploit code
CVE-2000-1114
Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Unify eWave ServletExec 3 - .JSP Source Disclosure2000-11-21 · remote · jsp · Verified
Impact
Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Unify | Ewave Servletexec | Versions 3.0, 3.0c |